Sep 11 18:07:07.553381 kernel: Linux version 6.12.109-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 15.3.0 p8) 15.3.0, GNU ld (Gentoo 2.46.0 p1) 2.46.0) #1 SMP PREEMPT_DYNAMIC Fri Sep 11 15:46:53 -00 2026 Sep 11 18:07:07.553410 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c18aa0b9dd9ef2d2a4c0316461ed9dfc65f8c30d1ccb1e93fe930f8d654ec024 Sep 11 18:07:07.553420 kernel: BIOS-provided physical RAM map: Sep 11 18:07:07.553427 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Sep 11 18:07:07.553435 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Sep 11 18:07:07.553442 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000044fdfff] usable Sep 11 18:07:07.553450 kernel: BIOS-e820: [mem 0x00000000044fe000-0x00000000048fdfff] reserved Sep 11 18:07:07.553457 kernel: BIOS-e820: [mem 0x00000000048fe000-0x000000003ff1efff] usable Sep 11 18:07:07.553463 kernel: BIOS-e820: [mem 0x000000003ff1f000-0x000000003ffc8fff] reserved Sep 11 18:07:07.553470 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Sep 11 18:07:07.553476 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Sep 11 18:07:07.553482 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Sep 11 18:07:07.553488 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Sep 11 18:07:07.553496 kernel: printk: legacy bootconsole [earlyser0] enabled Sep 11 18:07:07.553503 kernel: NX (Execute Disable) protection: active Sep 11 18:07:07.553510 kernel: APIC: Static calls initialized Sep 11 18:07:07.553517 kernel: efi: EFI v2.7 by Microsoft Sep 11 18:07:07.553525 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff88000 SMBIOS 3.0=0x3ff86000 MEMATTR=0x3e990718 RNG=0x3ffd2018 Sep 11 18:07:07.553532 kernel: random: crng init done Sep 11 18:07:07.553538 kernel: secureboot: Secure boot disabled Sep 11 18:07:07.553544 kernel: SMBIOS 3.1.0 present. Sep 11 18:07:07.553551 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 04/22/2026 Sep 11 18:07:07.553558 kernel: DMI: Memory slots populated: 2/2 Sep 11 18:07:07.553565 kernel: Hypervisor detected: Microsoft Hyper-V Sep 11 18:07:07.553571 kernel: Hyper-V: privilege flags low 0xae7f, high 0x3b8030, hints 0x9e4e24, misc 0xe0bed7b2 Sep 11 18:07:07.553578 kernel: Hyper-V: Nested features: 0x3e0101 Sep 11 18:07:07.553585 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Sep 11 18:07:07.553591 kernel: Hyper-V: Using hypercall for remote TLB flush Sep 11 18:07:07.553600 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Sep 11 18:07:07.553607 kernel: clocksource: hyperv_clocksource_msr: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Sep 11 18:07:07.553613 kernel: tsc: Detected 2299.998 MHz processor Sep 11 18:07:07.553620 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Sep 11 18:07:07.553629 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Sep 11 18:07:07.553636 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x10000000000 Sep 11 18:07:07.553644 kernel: MTRR map: 4 entries (2 fixed + 2 variable; max 18), built from 8 variable MTRRs Sep 11 18:07:07.553652 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Sep 11 18:07:07.553660 kernel: e820: update [mem 0x48000000-0xffffffff] usable ==> reserved Sep 11 18:07:07.553667 kernel: last_pfn = 0x40000 max_arch_pfn = 0x10000000000 Sep 11 18:07:07.553674 kernel: Using GB pages for direct mapping Sep 11 18:07:07.553682 kernel: ACPI: Early table checksum verification disabled Sep 11 18:07:07.553692 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Sep 11 18:07:07.553701 kernel: ACPI: XSDT 0x000000003FFF90E8 00005C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 11 18:07:07.553709 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 11 18:07:07.553716 kernel: ACPI: DSDT 0x000000003FFD6000 01E22B (v02 MSFTVM DSDT01 00000001 INTL 20230628) Sep 11 18:07:07.553724 kernel: ACPI: FACS 0x000000003FFFE000 000040 Sep 11 18:07:07.553732 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 11 18:07:07.553739 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 11 18:07:07.553748 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 11 18:07:07.553756 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v05 HVLITE HVLITETB 00000000 MSHV 00000000) Sep 11 18:07:07.553763 kernel: ACPI: SRAT 0x000000003FFD4000 0000A0 (v03 HVLITE HVLITETB 00000000 MSHV 00000000) Sep 11 18:07:07.553770 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Sep 11 18:07:07.553778 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Sep 11 18:07:07.553785 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff422a] Sep 11 18:07:07.553793 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Sep 11 18:07:07.553802 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Sep 11 18:07:07.553810 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Sep 11 18:07:07.553818 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Sep 11 18:07:07.553826 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Sep 11 18:07:07.553833 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd409f] Sep 11 18:07:07.553840 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Sep 11 18:07:07.553848 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] Sep 11 18:07:07.553857 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] Sep 11 18:07:07.553865 kernel: NUMA: Node 0 [mem 0x00001000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00001000-0x2bfffffff] Sep 11 18:07:07.553873 kernel: NODE_DATA(0) allocated [mem 0x2bfff8dc0-0x2bfffffff] Sep 11 18:07:07.553881 kernel: Zone ranges: Sep 11 18:07:07.553889 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Sep 11 18:07:07.553896 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Sep 11 18:07:07.553904 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Sep 11 18:07:07.553913 kernel: Device empty Sep 11 18:07:07.553921 kernel: Movable zone start for each node Sep 11 18:07:07.553928 kernel: Early memory node ranges Sep 11 18:07:07.553936 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Sep 11 18:07:07.553944 kernel: node 0: [mem 0x0000000000100000-0x00000000044fdfff] Sep 11 18:07:07.553951 kernel: node 0: [mem 0x00000000048fe000-0x000000003ff1efff] Sep 11 18:07:07.553959 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Sep 11 18:07:07.553967 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Sep 11 18:07:07.553976 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Sep 11 18:07:07.553984 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Sep 11 18:07:07.553991 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Sep 11 18:07:07.553999 kernel: On node 0, zone DMA32: 1024 pages in unavailable ranges Sep 11 18:07:07.554024 kernel: On node 0, zone DMA32: 224 pages in unavailable ranges Sep 11 18:07:07.554031 kernel: ACPI: PM-Timer IO Port: 0x408 Sep 11 18:07:07.554039 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Sep 11 18:07:07.554049 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Sep 11 18:07:07.554056 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Sep 11 18:07:07.554064 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Sep 11 18:07:07.554072 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Sep 11 18:07:07.554080 kernel: TSC deadline timer available Sep 11 18:07:07.554087 kernel: CPU topo: Max. logical packages: 1 Sep 11 18:07:07.554095 kernel: CPU topo: Max. logical dies: 1 Sep 11 18:07:07.554105 kernel: CPU topo: Max. dies per package: 1 Sep 11 18:07:07.554112 kernel: CPU topo: Max. threads per core: 2 Sep 11 18:07:07.554120 kernel: CPU topo: Num. cores per package: 1 Sep 11 18:07:07.554128 kernel: CPU topo: Num. threads per package: 2 Sep 11 18:07:07.554136 kernel: CPU topo: Allowing 2 present CPUs plus 0 hotplug CPUs Sep 11 18:07:07.554144 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Sep 11 18:07:07.554152 kernel: Booting paravirtualized kernel on Hyper-V Sep 11 18:07:07.554162 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Sep 11 18:07:07.554170 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:2 nr_cpu_ids:2 nr_node_ids:1 Sep 11 18:07:07.554178 kernel: percpu: Embedded 60 pages/cpu s208472 r8192 d29096 u1048576 Sep 11 18:07:07.554186 kernel: pcpu-alloc: s208472 r8192 d29096 u1048576 alloc=1*2097152 Sep 11 18:07:07.554194 kernel: pcpu-alloc: [0] 0 1 Sep 11 18:07:07.554202 kernel: Hyper-V: PV spinlocks enabled Sep 11 18:07:07.554209 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Sep 11 18:07:07.554221 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c18aa0b9dd9ef2d2a4c0316461ed9dfc65f8c30d1ccb1e93fe930f8d654ec024 Sep 11 18:07:07.554230 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Sep 11 18:07:07.554237 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Sep 11 18:07:07.554245 kernel: Fallback order for Node 0: 0 Sep 11 18:07:07.554253 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2095807 Sep 11 18:07:07.554261 kernel: Policy zone: Normal Sep 11 18:07:07.554269 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Sep 11 18:07:07.554279 kernel: software IO TLB: area num 2. Sep 11 18:07:07.554287 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Sep 11 18:07:07.554294 kernel: ftrace: allocating 41466 entries in 164 pages Sep 11 18:07:07.554302 kernel: ftrace: allocated 164 pages with 3 groups Sep 11 18:07:07.554310 kernel: Dynamic Preempt: voluntary Sep 11 18:07:07.554318 kernel: rcu: Preemptible hierarchical RCU implementation. Sep 11 18:07:07.554327 kernel: rcu: RCU event tracing is enabled. Sep 11 18:07:07.554342 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Sep 11 18:07:07.554351 kernel: Trampoline variant of Tasks RCU enabled. Sep 11 18:07:07.554361 kernel: Rude variant of Tasks RCU enabled. Sep 11 18:07:07.554369 kernel: Tracing variant of Tasks RCU enabled. Sep 11 18:07:07.554378 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Sep 11 18:07:07.554386 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Sep 11 18:07:07.554394 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Sep 11 18:07:07.554403 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Sep 11 18:07:07.554412 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Sep 11 18:07:07.554422 kernel: Using NULL legacy PIC Sep 11 18:07:07.554430 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Sep 11 18:07:07.554438 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. Sep 11 18:07:07.554447 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Sep 11 18:07:07.554457 kernel: Console: colour dummy device 80x25 Sep 11 18:07:07.554466 kernel: printk: legacy console [tty1] enabled Sep 11 18:07:07.554474 kernel: printk: legacy console [ttyS0] enabled Sep 11 18:07:07.554483 kernel: printk: legacy bootconsole [earlyser0] disabled Sep 11 18:07:07.554491 kernel: ACPI: Core revision 20240827 Sep 11 18:07:07.554499 kernel: Failed to register legacy timer interrupt Sep 11 18:07:07.554507 kernel: APIC: Switch to symmetric I/O mode setup Sep 11 18:07:07.554517 kernel: x2apic enabled Sep 11 18:07:07.554525 kernel: APIC: Switched APIC routing to: physical x2apic Sep 11 18:07:07.554534 kernel: Hyper-V: Host Build 10.0.26102.1438-1-0 Sep 11 18:07:07.554542 kernel: Hyper-V: enabling crash_kexec_post_notifiers Sep 11 18:07:07.554551 kernel: Hyper-V: Disabling IBT because of Hyper-V bug Sep 11 18:07:07.554560 kernel: Hyper-V: Using IPI hypercalls Sep 11 18:07:07.554568 kernel: APIC: send_IPI() replaced with hv_send_ipi() Sep 11 18:07:07.554578 kernel: APIC: send_IPI_mask() replaced with hv_send_ipi_mask() Sep 11 18:07:07.554587 kernel: APIC: send_IPI_mask_allbutself() replaced with hv_send_ipi_mask_allbutself() Sep 11 18:07:07.554595 kernel: APIC: send_IPI_allbutself() replaced with hv_send_ipi_allbutself() Sep 11 18:07:07.554603 kernel: APIC: send_IPI_all() replaced with hv_send_ipi_all() Sep 11 18:07:07.554611 kernel: APIC: send_IPI_self() replaced with hv_send_ipi_self() Sep 11 18:07:07.554619 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212733415c7, max_idle_ns: 440795236380 ns Sep 11 18:07:07.554627 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 4599.99 BogoMIPS (lpj=2299998) Sep 11 18:07:07.554636 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Sep 11 18:07:07.554644 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Sep 11 18:07:07.554652 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Sep 11 18:07:07.554660 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Sep 11 18:07:07.554667 kernel: Spectre V2 : Mitigation: Retpolines Sep 11 18:07:07.554674 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Sep 11 18:07:07.554682 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Sep 11 18:07:07.554689 kernel: RETBleed: Vulnerable Sep 11 18:07:07.554697 kernel: Speculative Store Bypass: Vulnerable Sep 11 18:07:07.554705 kernel: active return thunk: its_return_thunk Sep 11 18:07:07.554713 kernel: ITS: Mitigation: Aligned branch/return thunks Sep 11 18:07:07.554720 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Sep 11 18:07:07.554728 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Sep 11 18:07:07.554735 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Sep 11 18:07:07.554744 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Sep 11 18:07:07.554752 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Sep 11 18:07:07.554760 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Sep 11 18:07:07.554768 kernel: x86/fpu: Supporting XSAVE feature 0x800: 'Control-flow User registers' Sep 11 18:07:07.554776 kernel: x86/fpu: Supporting XSAVE feature 0x20000: 'AMX Tile config' Sep 11 18:07:07.554784 kernel: x86/fpu: Supporting XSAVE feature 0x40000: 'AMX Tile data' Sep 11 18:07:07.554792 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Sep 11 18:07:07.554800 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Sep 11 18:07:07.554808 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Sep 11 18:07:07.554815 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Sep 11 18:07:07.554823 kernel: x86/fpu: xstate_offset[11]: 2432, xstate_sizes[11]: 16 Sep 11 18:07:07.554831 kernel: x86/fpu: xstate_offset[17]: 2496, xstate_sizes[17]: 64 Sep 11 18:07:07.554838 kernel: x86/fpu: xstate_offset[18]: 2560, xstate_sizes[18]: 8192 Sep 11 18:07:07.554846 kernel: x86/fpu: Enabled xstate features 0x608e7, context size is 10752 bytes, using 'compacted' format. Sep 11 18:07:07.554855 kernel: Freeing SMP alternatives memory: 36K Sep 11 18:07:07.554863 kernel: pid_max: default: 32768 minimum: 301 Sep 11 18:07:07.554873 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima Sep 11 18:07:07.554881 kernel: landlock: Up and running. Sep 11 18:07:07.554889 kernel: SELinux: Initializing. Sep 11 18:07:07.554897 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 11 18:07:07.554904 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Sep 11 18:07:07.554912 kernel: smpboot: CPU0: Intel INTEL(R) XEON(R) PLATINUM 8573C (family: 0x6, model: 0xcf, stepping: 0x2) Sep 11 18:07:07.554920 kernel: Performance Events: unsupported p6 CPU model 207 no PMU driver, software events only. Sep 11 18:07:07.554928 kernel: signal: max sigframe size: 11952 Sep 11 18:07:07.554936 kernel: rcu: Hierarchical SRCU implementation. Sep 11 18:07:07.554947 kernel: rcu: Max phase no-delay instances is 400. Sep 11 18:07:07.554955 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level Sep 11 18:07:07.554964 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Sep 11 18:07:07.554973 kernel: smp: Bringing up secondary CPUs ... Sep 11 18:07:07.554980 kernel: smpboot: x86: Booting SMP configuration: Sep 11 18:07:07.554987 kernel: .... node #0, CPUs: #1 Sep 11 18:07:07.554995 kernel: smp: Brought up 1 node, 2 CPUs Sep 11 18:07:07.555027 kernel: smpboot: Total of 2 processors activated (9199.99 BogoMIPS) Sep 11 18:07:07.555039 kernel: Memory: 8059508K/8383228K available (14336K kernel code, 2475K rwdata, 32660K rodata, 16148K init, 1892K bss, 317540K reserved, 0K cma-reserved) Sep 11 18:07:07.555047 kernel: devtmpfs: initialized Sep 11 18:07:07.555055 kernel: x86/mm: Memory block size: 128MB Sep 11 18:07:07.555064 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Sep 11 18:07:07.555073 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Sep 11 18:07:07.555081 kernel: pinctrl core: initialized pinctrl subsystem Sep 11 18:07:07.555090 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Sep 11 18:07:07.555100 kernel: audit: initializing netlink subsys (disabled) Sep 11 18:07:07.555108 kernel: audit: type=2000 audit(1789150021.117:1): state=initialized audit_enabled=0 res=1 Sep 11 18:07:07.555116 kernel: thermal_sys: Registered thermal governor 'step_wise' Sep 11 18:07:07.555125 kernel: thermal_sys: Registered thermal governor 'user_space' Sep 11 18:07:07.555134 kernel: cpuidle: using governor menu Sep 11 18:07:07.555142 kernel: efi: Freeing EFI boot services memory: 33940K Sep 11 18:07:07.555149 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Sep 11 18:07:07.555159 kernel: dca service started, version 1.12.1 Sep 11 18:07:07.555167 kernel: e820: reserve RAM buffer [mem 0x044fe000-0x07ffffff] Sep 11 18:07:07.555175 kernel: e820: reserve RAM buffer [mem 0x3ff1f000-0x3fffffff] Sep 11 18:07:07.555183 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Sep 11 18:07:07.555191 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages Sep 11 18:07:07.555199 kernel: HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page Sep 11 18:07:07.555207 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages Sep 11 18:07:07.555217 kernel: HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page Sep 11 18:07:07.555225 kernel: ACPI: Added _OSI(Module Device) Sep 11 18:07:07.555234 kernel: ACPI: Added _OSI(Processor Device) Sep 11 18:07:07.555242 kernel: ACPI: Added _OSI(Processor Aggregator Device) Sep 11 18:07:07.555251 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Sep 11 18:07:07.555259 kernel: ACPI: Interpreter enabled Sep 11 18:07:07.555267 kernel: ACPI: PM: (supports S0 S5) Sep 11 18:07:07.555276 kernel: ACPI: Using IOAPIC for interrupt routing Sep 11 18:07:07.555285 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Sep 11 18:07:07.555293 kernel: PCI: Ignoring E820 reservations for host bridge windows Sep 11 18:07:07.555301 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Sep 11 18:07:07.555310 kernel: iommu: Default domain type: Translated Sep 11 18:07:07.555318 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Sep 11 18:07:07.555326 kernel: efivars: Registered efivars operations Sep 11 18:07:07.555335 kernel: PCI: Using ACPI for IRQ routing Sep 11 18:07:07.555344 kernel: PCI: System does not support PCI Sep 11 18:07:07.555352 kernel: vgaarb: loaded Sep 11 18:07:07.555360 kernel: clocksource: Switched to clocksource tsc-early Sep 11 18:07:07.555369 kernel: VFS: Disk quotas dquot_6.6.0 Sep 11 18:07:07.555377 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Sep 11 18:07:07.555385 kernel: pnp: PnP ACPI init Sep 11 18:07:07.555395 kernel: pnp: PnP ACPI: found 3 devices Sep 11 18:07:07.555403 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Sep 11 18:07:07.555411 kernel: NET: Registered PF_INET protocol family Sep 11 18:07:07.555419 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Sep 11 18:07:07.555428 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Sep 11 18:07:07.555436 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Sep 11 18:07:07.555445 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Sep 11 18:07:07.555454 kernel: TCP bind hash table entries: 65536 (order: 9, 2097152 bytes, linear) Sep 11 18:07:07.555462 kernel: TCP: Hash tables configured (established 65536 bind 65536) Sep 11 18:07:07.555471 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Sep 11 18:07:07.555479 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Sep 11 18:07:07.555487 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Sep 11 18:07:07.555495 kernel: NET: Registered PF_XDP protocol family Sep 11 18:07:07.555503 kernel: PCI: CLS 0 bytes, default 64 Sep 11 18:07:07.555512 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Sep 11 18:07:07.555521 kernel: software IO TLB: mapped [mem 0x000000003a990000-0x000000003e990000] (64MB) Sep 11 18:07:07.555530 kernel: RAPL PMU: API unit is 2^-32 Joules, 1 fixed counters, 10737418240 ms ovfl timer Sep 11 18:07:07.555539 kernel: RAPL PMU: hw unit of domain psys 2^-0 Joules Sep 11 18:07:07.555547 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212733415c7, max_idle_ns: 440795236380 ns Sep 11 18:07:07.555556 kernel: clocksource: Switched to clocksource tsc Sep 11 18:07:07.555564 kernel: Initialise system trusted keyrings Sep 11 18:07:07.555574 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Sep 11 18:07:07.555582 kernel: Key type asymmetric registered Sep 11 18:07:07.555590 kernel: Asymmetric key parser 'x509' registered Sep 11 18:07:07.555599 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) Sep 11 18:07:07.555607 kernel: io scheduler mq-deadline registered Sep 11 18:07:07.555615 kernel: io scheduler kyber registered Sep 11 18:07:07.555623 kernel: io scheduler bfq registered Sep 11 18:07:07.555632 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Sep 11 18:07:07.555641 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Sep 11 18:07:07.555649 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Sep 11 18:07:07.555657 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Sep 11 18:07:07.555665 kernel: serial8250: ttyS2 at I/O 0x3e8 (irq = 4, base_baud = 115200) is a 16550A Sep 11 18:07:07.555673 kernel: ACPI: bus type drm_connector registered Sep 11 18:07:07.555681 kernel: i8042: PNP: No PS/2 controller found. Sep 11 18:07:07.555866 kernel: rtc_cmos 00:02: registered as rtc0 Sep 11 18:07:07.555981 kernel: rtc_cmos 00:02: setting system clock to 2026-09-11T18:07:02 UTC (1789150022) Sep 11 18:07:07.557375 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Sep 11 18:07:07.557455 kernel: intel_pstate: Intel P-state driver initializing Sep 11 18:07:07.557467 kernel: efifb: probing for efifb Sep 11 18:07:07.557476 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Sep 11 18:07:07.557486 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Sep 11 18:07:07.557499 kernel: efifb: scrolling: redraw Sep 11 18:07:07.557508 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Sep 11 18:07:07.557518 kernel: Console: switching to colour frame buffer device 128x48 Sep 11 18:07:07.557528 kernel: fb0: EFI VGA frame buffer device Sep 11 18:07:07.557537 kernel: pstore: Using crash dump compression: deflate Sep 11 18:07:07.557547 kernel: pstore: Registered efi_pstore as persistent store backend Sep 11 18:07:07.557556 kernel: NET: Registered PF_INET6 protocol family Sep 11 18:07:07.557567 kernel: Segment Routing with IPv6 Sep 11 18:07:07.557576 kernel: In-situ OAM (IOAM) with IPv6 Sep 11 18:07:07.557585 kernel: NET: Registered PF_PACKET protocol family Sep 11 18:07:07.557595 kernel: Key type dns_resolver registered Sep 11 18:07:07.557604 kernel: IPI shorthand broadcast: enabled Sep 11 18:07:07.557613 kernel: sched_clock: Marking stable (1907153180, 100666281)->(2280426226, -272606765) Sep 11 18:07:07.557622 kernel: registered taskstats version 1 Sep 11 18:07:07.557631 kernel: Loading compiled-in X.509 certificates Sep 11 18:07:07.557640 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.109-flatcar: 028c78a31b43b01390c7cd608a0581d39340bffd' Sep 11 18:07:07.557648 kernel: Demotion targets for Node 0: null Sep 11 18:07:07.557656 kernel: Key type .fscrypt registered Sep 11 18:07:07.557664 kernel: Key type fscrypt-provisioning registered Sep 11 18:07:07.557672 kernel: ima: No TPM chip found, activating TPM-bypass! Sep 11 18:07:07.557679 kernel: ima: Allocated hash algorithm: sha1 Sep 11 18:07:07.557686 kernel: ima: No architecture policies found Sep 11 18:07:07.557692 kernel: clk: Disabling unused clocks Sep 11 18:07:07.557697 kernel: Freeing unused kernel image (initmem) memory: 16148K Sep 11 18:07:07.557703 kernel: Write protecting the kernel read-only data: 47104k Sep 11 18:07:07.557709 kernel: Freeing unused kernel image (rodata/data gap) memory: 108K Sep 11 18:07:07.557714 kernel: Run /init as init process Sep 11 18:07:07.557720 kernel: with arguments: Sep 11 18:07:07.557726 kernel: /init Sep 11 18:07:07.557732 kernel: with environment: Sep 11 18:07:07.557737 kernel: HOME=/ Sep 11 18:07:07.557742 kernel: TERM=linux Sep 11 18:07:07.557748 kernel: hv_vmbus: hv_mmio=[mem 0x40000000-0xfed3ffff],[mem 0xfc0000000-0xfffffffff] fb=[mem 0x40000000-0x47ffffff] Sep 11 18:07:07.557754 kernel: hv_vmbus: Vmbus version:5.3 Sep 11 18:07:07.557759 kernel: pps_core: LinuxPPS API ver. 1 registered Sep 11 18:07:07.557765 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Sep 11 18:07:07.557772 kernel: PTP clock support registered Sep 11 18:07:07.557778 kernel: hv_utils: Registering HyperV Utility Driver Sep 11 18:07:07.557783 kernel: SCSI subsystem initialized Sep 11 18:07:07.557815 kernel: hv_vmbus: registering driver hv_utils Sep 11 18:07:07.557822 kernel: hv_utils: Shutdown IC version 3.2 Sep 11 18:07:07.557828 kernel: hv_utils: Heartbeat IC version 3.0 Sep 11 18:07:07.557833 kernel: hv_utils: TimeSync IC version 4.0 Sep 11 18:07:07.557840 kernel: hv_vmbus: registering driver hv_pci Sep 11 18:07:07.557992 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI VMBus probing: Using version 0x10004 Sep 11 18:07:07.558130 kernel: hv_pci 7ad35d50-c05b-47ab-b3a0-56a9a845852b: PCI host bridge to bus c05b:00 Sep 11 18:07:07.558242 kernel: pci_bus c05b:00: root bus resource [mem 0xfc0000000-0xfc007ffff window] Sep 11 18:07:07.558332 kernel: pci_bus c05b:00: No busn resource found for root bus, will use [bus 00-ff] Sep 11 18:07:07.558445 kernel: pci c05b:00:00.0: [1414:00a9] type 00 class 0x010802 PCIe Endpoint Sep 11 18:07:07.558543 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit] Sep 11 18:07:07.558632 kernel: pci_bus c05b:00: busn_res: [bus 00-ff] end is updated to 00 Sep 11 18:07:07.558729 kernel: pci c05b:00:00.0: BAR 0 [mem 0xfc0000000-0xfc007ffff 64bit]: assigned Sep 11 18:07:07.558736 kernel: hv_vmbus: registering driver hv_storvsc Sep 11 18:07:07.558835 kernel: scsi host0: storvsc_host_t Sep 11 18:07:07.558941 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 5 Sep 11 18:07:07.558949 kernel: hid: raw HID events driver (C) Jiri Kosina Sep 11 18:07:07.558954 kernel: hv_vmbus: registering driver hid_hyperv Sep 11 18:07:07.558959 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Sep 11 18:07:07.559232 kernel: hid-hyperv 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Sep 11 18:07:07.559253 kernel: hv_vmbus: registering driver hyperv_keyboard Sep 11 18:07:07.559263 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Sep 11 18:07:07.559401 kernel: nvme nvme0: pci function c05b:00:00.0 Sep 11 18:07:07.559549 kernel: nvme c05b:00:00.0: enabling device (0000 -> 0002) Sep 11 18:07:07.559679 kernel: nvme nvme0: 2/0/0 default/read/poll queues Sep 11 18:07:07.559691 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Sep 11 18:07:07.559845 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Sep 11 18:07:07.559856 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Sep 11 18:07:07.559999 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Sep 11 18:07:07.562177 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Sep 11 18:07:07.562258 kernel: device-mapper: uevent: version 1.0.3 Sep 11 18:07:07.562329 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev Sep 11 18:07:07.562396 kernel: device-mapper: verity: sha256 using shash "sha256-generic" Sep 11 18:07:07.562407 kernel: raid6: avx512x4 gen() 46926 MB/s Sep 11 18:07:07.562417 kernel: raid6: avx512x2 gen() 47758 MB/s Sep 11 18:07:07.562426 kernel: raid6: avx512x1 gen() 28570 MB/s Sep 11 18:07:07.562489 kernel: raid6: avx2x4 gen() 41569 MB/s Sep 11 18:07:07.562500 kernel: raid6: avx2x2 gen() 44192 MB/s Sep 11 18:07:07.562564 kernel: raid6: avx2x1 gen() 30827 MB/s Sep 11 18:07:07.562576 kernel: raid6: using algorithm avx512x2 gen() 47758 MB/s Sep 11 18:07:07.562662 kernel: raid6: .... xor() 32337 MB/s, rmw enabled Sep 11 18:07:07.562673 kernel: raid6: using avx512x2 recovery algorithm Sep 11 18:07:07.562737 kernel: xor: automatically using best checksumming function avx Sep 11 18:07:07.562749 kernel: Btrfs loaded, zoned=no, fsverity=no Sep 11 18:07:07.562803 kernel: BTRFS: device fsid 30693955-f292-4e2c-8e97-60506245ccd3 devid 1 transid 38 /dev/mapper/usr (254:0) scanned by mount (1035) Sep 11 18:07:07.562810 kernel: BTRFS info (device dm-0): first mount of filesystem 30693955-f292-4e2c-8e97-60506245ccd3 Sep 11 18:07:07.562817 kernel: BTRFS info (device dm-0): using crc32c (crc32c-intel) checksum algorithm Sep 11 18:07:07.562825 kernel: BTRFS info (device dm-0 state E): enabling ssd optimizations Sep 11 18:07:07.562837 kernel: BTRFS info (device dm-0 state E): disabling log replay at mount time Sep 11 18:07:07.562850 kernel: BTRFS info (device dm-0 state E): enabling free space tree Sep 11 18:07:07.562861 kernel: loop: module loaded Sep 11 18:07:07.562872 kernel: loop0: detected capacity change from 0 to 109608 Sep 11 18:07:07.562879 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Sep 11 18:07:07.562887 systemd[1]: Successfully made /usr/ read-only. Sep 11 18:07:07.562909 systemd[1]: systemd 260.4 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Sep 11 18:07:07.562920 systemd[1]: Detected virtualization microsoft. Sep 11 18:07:07.562926 systemd[1]: Detected architecture x86-64. Sep 11 18:07:07.562933 systemd[1]: Running in initrd. Sep 11 18:07:07.562951 systemd[1]: Initializing machine ID from random generator. Sep 11 18:07:07.562964 systemd[1]: No hostname configured, using default hostname. Sep 11 18:07:07.562972 systemd[1]: Hostname set to . Sep 11 18:07:07.562978 (gene[1068]: '/usr/lib/systemd/system-generators/dracut-crypt-generator' failed with exit status 2. Sep 11 18:07:07.562993 systemd[1]: Queued start job for default target initrd.target. Sep 11 18:07:07.563021 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Sep 11 18:07:07.563032 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Sep 11 18:07:07.563040 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... Sep 11 18:07:07.563053 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Sep 11 18:07:07.563068 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... Sep 11 18:07:07.563080 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... Sep 11 18:07:07.563092 systemd[1]: Expecting device dev-mapper-usr.device - /dev/mapper/usr... Sep 11 18:07:07.563099 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Sep 11 18:07:07.563106 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Sep 11 18:07:07.563114 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. Sep 11 18:07:07.563128 systemd[1]: Reached target paths.target - Path Units. Sep 11 18:07:07.563138 systemd[1]: Reached target slices.target - Slice Units. Sep 11 18:07:07.563150 systemd[1]: Reached target swap.target - Swaps. Sep 11 18:07:07.563158 systemd[1]: Reached target timers.target - Timer Units. Sep 11 18:07:07.563165 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. Sep 11 18:07:07.563172 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. Sep 11 18:07:07.563188 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Sep 11 18:07:07.563199 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Sep 11 18:07:07.563206 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). Sep 11 18:07:07.563215 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. Sep 11 18:07:07.563228 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Sep 11 18:07:07.563240 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Sep 11 18:07:07.563250 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Sep 11 18:07:07.563258 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Sep 11 18:07:07.563265 systemd[1]: Reached target sockets.target - Socket Units. Sep 11 18:07:07.563272 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments skipped, no trigger condition checks were met. Sep 11 18:07:07.563287 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... Sep 11 18:07:07.563298 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Sep 11 18:07:07.563307 systemd[1]: Finished network-cleanup.service - Network Cleanup. Sep 11 18:07:07.563314 systemd[1]: systemd-battery-check.service - Early Battery Level Check skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/class/power_supply Sep 11 18:07:07.563322 systemd[1]: Starting systemd-journald.service - Journal Service... Sep 11 18:07:07.563341 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Sep 11 18:07:07.563352 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Sep 11 18:07:07.563360 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. Sep 11 18:07:07.563399 systemd-journald[1159]: Collecting audit messages is enabled. Sep 11 18:07:07.563428 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Sep 11 18:07:07.563441 kernel: audit: type=1130 audit(1789150027.558:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.563452 systemd-journald[1159]: Journal started Sep 11 18:07:07.563471 systemd-journald[1159]: Runtime Journal (/run/log/journal/bb4fe66f501e4129ac5afc4d92ad97b6) is 8M, max 158.5M, 150.5M free. Sep 11 18:07:07.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.554994 systemd-modules-load[1162]: Using 2 probe threads Sep 11 18:07:07.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.578984 kernel: audit: type=1130 audit(1789150027.565:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.579090 systemd[1]: Started systemd-journald.service - Journal Service. Sep 11 18:07:07.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.587021 kernel: audit: type=1130 audit(1789150027.581:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.587139 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Sep 11 18:07:07.600256 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Sep 11 18:07:07.701929 systemd-tmpfiles[1171]: /usr/lib/tmpfiles.d/systemd.conf:30: Duplicate line for path "/var/lib/systemd", ignoring. Sep 11 18:07:07.702518 systemd-tmpfiles[1171]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Sep 11 18:07:07.710100 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Sep 11 18:07:07.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.722592 kernel: audit: type=1130 audit(1789150027.713:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.722743 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Sep 11 18:07:07.732093 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Sep 11 18:07:07.732592 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Sep 11 18:07:07.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.740036 kernel: audit: type=1130 audit(1789150027.731:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.755215 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Sep 11 18:07:07.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.761676 kernel: audit: type=1130 audit(1789150027.754:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.761744 kernel: Bridge firewalling registered Sep 11 18:07:07.762291 systemd-modules-load[1162]: Inserted module 'br_netfilter' Sep 11 18:07:07.764158 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Sep 11 18:07:07.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.765092 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Sep 11 18:07:07.775954 kernel: audit: type=1130 audit(1789150027.763:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.776635 systemd-vconsole-setup[1165]: Configuration of first virtual console was skipped, ignoring remaining ones. Sep 11 18:07:07.779494 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Sep 11 18:07:07.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.788246 kernel: audit: type=1130 audit(1789150027.780:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.788122 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... Sep 11 18:07:07.792257 systemd[1]: systemd-sysctl.service: Deactivated successfully. Sep 11 18:07:07.792438 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Sep 11 18:07:07.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.803258 kernel: audit: type=1130 audit(1789150027.798:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.803350 kernel: audit: type=1131 audit(1789150027.798:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.805185 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Sep 11 18:07:07.804000 audit: BPF prog-id=5 op=LOAD Sep 11 18:07:07.815833 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Sep 11 18:07:07.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.822109 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... Sep 11 18:07:07.842262 dracut-cmdline[1195]: dracut-111 Sep 11 18:07:07.846985 dracut-cmdline[1195]: Using kernel command line parameters: SYSTEMD_SULOGIN_FORCE=1 rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=c18aa0b9dd9ef2d2a4c0316461ed9dfc65f8c30d1ccb1e93fe930f8d654ec024 Sep 11 18:07:07.862061 systemd-resolved[1184]: Positive Trust Anchors: Sep 11 18:07:07.863502 systemd-resolved[1184]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 11 18:07:07.863506 systemd-resolved[1184]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Sep 11 18:07:07.863541 systemd-resolved[1184]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Sep 11 18:07:07.920267 systemd-resolved[1184]: Defaulting to hostname 'linux'. Sep 11 18:07:07.922343 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Sep 11 18:07:07.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:07.925705 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Sep 11 18:07:07.993028 kernel: Loading iSCSI transport class v2.0-870. Sep 11 18:07:08.065039 kernel: iscsi: registered transport (tcp) Sep 11 18:07:08.118026 kernel: iscsi: registered transport (qla4xxx) Sep 11 18:07:08.118062 kernel: QLogic iSCSI HBA Driver Sep 11 18:07:08.173901 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Sep 11 18:07:08.192931 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Sep 11 18:07:08.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.197552 systemd[1]: Reached target network-pre.target - Preparation for Network. Sep 11 18:07:08.232904 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. Sep 11 18:07:08.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.238112 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... Sep 11 18:07:08.250140 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... Sep 11 18:07:08.268548 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. Sep 11 18:07:08.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.269000 audit: BPF prog-id=6 op=LOAD Sep 11 18:07:08.269000 audit: BPF prog-id=7 op=LOAD Sep 11 18:07:08.273325 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Sep 11 18:07:08.366945 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Sep 11 18:07:08.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.413924 systemd-udevd[1414]: Using default interface naming scheme 'v260'. Sep 11 18:07:08.432412 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Sep 11 18:07:08.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.440546 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... Sep 11 18:07:08.443000 audit: BPF prog-id=8 op=LOAD Sep 11 18:07:08.445254 systemd[1]: Starting systemd-networkd.service - Network Management... Sep 11 18:07:08.469993 dracut-pre-trigger[1542]: rd.md=0: removing MD RAID activation Sep 11 18:07:08.487582 systemd-networkd[1545]: Failed to open nftables netlink socket. IPMasquerade= and NFTSet= settings will not be applied. Ignoring: Protocol not supported Sep 11 18:07:08.495864 systemd-networkd[1545]: lo: Link UP Sep 11 18:07:08.497115 systemd-networkd[1545]: lo: Gained carrier Sep 11 18:07:08.498885 systemd[1]: Started systemd-networkd.service - Network Management. Sep 11 18:07:08.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.500847 systemd[1]: Reached target network.target - Network. Sep 11 18:07:08.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.505198 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. Sep 11 18:07:08.509123 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Sep 11 18:07:08.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.575183 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Sep 11 18:07:08.581073 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... Sep 11 18:07:08.734416 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 11 18:07:08.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.734604 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Sep 11 18:07:08.735472 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... Sep 11 18:07:08.738259 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Sep 11 18:07:08.759029 kernel: hv_vmbus: registering driver hv_netvsc Sep 11 18:07:08.768794 kernel: hv_netvsc f8615163-0000-1000-2000-002248a3d87f (unnamed net_device) (uninitialized): VF slot 1 added Sep 11 18:07:08.796972 systemd-networkd[1545]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Sep 11 18:07:08.805243 kernel: cryptd: max_cpu_qlen set to 1000 Sep 11 18:07:08.800481 systemd-networkd[1545]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 11 18:07:08.805330 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#237 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Sep 11 18:07:08.801174 systemd-networkd[1545]: eth0: Link UP Sep 11 18:07:08.801298 systemd-networkd[1545]: eth0: Gained carrier Sep 11 18:07:08.801308 systemd-networkd[1545]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Sep 11 18:07:08.806807 systemd-vconsole-setup[1618]: Configuration of first virtual console was skipped, ignoring remaining ones. Sep 11 18:07:08.815515 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Sep 11 18:07:08.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:08.819057 systemd-networkd[1545]: eth0: DHCPv4 address 10.0.0.33/24, gateway 10.0.0.1 acquired from 168.63.129.16 Sep 11 18:07:08.830025 kernel: AES CTR mode by8 optimization enabled Sep 11 18:07:08.979030 kernel: nvme nvme0: using unchecked data buffer Sep 11 18:07:09.077547 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - MSFT NVMe Accelerator v1.0 USR-A. Sep 11 18:07:09.080941 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... Sep 11 18:07:09.183073 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - MSFT NVMe Accelerator v1.0 EFI-SYSTEM. Sep 11 18:07:09.211848 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM. Sep 11 18:07:09.242274 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - MSFT NVMe Accelerator v1.0 ROOT. Sep 11 18:07:09.272235 systemd[1]: Mounting oem.mount - /oem... Sep 11 18:07:09.329031 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 (259:5) scanned by mount (1741) Sep 11 18:07:09.331015 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem 4e58a52c-47dd-4c51-a521-e8e602003282 Sep 11 18:07:09.333017 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Sep 11 18:07:09.340697 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. Sep 11 18:07:09.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:09.341442 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. Sep 11 18:07:09.347106 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Sep 11 18:07:09.347361 systemd[1]: Reached target remote-fs.target - Remote File Systems. Sep 11 18:07:09.356606 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... Sep 11 18:07:09.372233 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 11 18:07:09.372276 kernel: BTRFS info (device nvme0n1p6): turning on async discard Sep 11 18:07:09.373300 kernel: BTRFS info (device nvme0n1p6): enabling free space tree Sep 11 18:07:09.374761 systemd[1]: Mounted oem.mount - /oem. Sep 11 18:07:09.426599 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... Sep 11 18:07:09.440945 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. Sep 11 18:07:09.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:09.784033 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI VMBus probing: Using version 0x10004 Sep 11 18:07:09.784239 kernel: hv_pci 00000001-7870-47b5-b203-907d12ca697e: PCI host bridge to bus 7870:00 Sep 11 18:07:09.786738 kernel: pci_bus 7870:00: root bus resource [mem 0xfc2000000-0xfc4007fff window] Sep 11 18:07:09.788373 kernel: pci_bus 7870:00: No busn resource found for root bus, will use [bus 00-ff] Sep 11 18:07:09.794124 kernel: pci 7870:00:00.0: [1414:00ba] type 00 class 0x020000 PCIe Endpoint Sep 11 18:07:09.797079 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref] Sep 11 18:07:09.802485 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref] Sep 11 18:07:09.802552 kernel: pci 7870:00:00.0: enabling Extended Tags Sep 11 18:07:09.818187 kernel: pci_bus 7870:00: busn_res: [bus 00-ff] end is updated to 00 Sep 11 18:07:09.818393 kernel: pci 7870:00:00.0: BAR 0 [mem 0xfc2000000-0xfc3ffffff 64bit pref]: assigned Sep 11 18:07:09.823079 kernel: pci 7870:00:00.0: BAR 4 [mem 0xfc4000000-0xfc4007fff 64bit pref]: assigned Sep 11 18:07:09.870891 kernel: mana 7870:00:00.0: enabling device (0000 -> 0002) Sep 11 18:07:09.880022 kernel: mana 7870:00:00.0: Microsoft Azure Network Adapter protocol version: 0.1.1 Sep 11 18:07:09.886450 kernel: hv_netvsc f8615163-0000-1000-2000-002248a3d87f eth0: VF registering: eth1 Sep 11 18:07:09.886647 kernel: mana 7870:00:00.0 eth1: joined to eth0 Sep 11 18:07:09.892647 systemd-networkd[1545]: eth1: Interface name change detected, renamed to enP30832s1. Sep 11 18:07:09.895113 kernel: mana 7870:00:00.0 enP30832s1: renamed from eth1 Sep 11 18:07:09.955231 systemd-networkd[1545]: eth0: Gained IPv6LL Sep 11 18:07:09.990027 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16 Sep 11 18:07:09.996726 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 Sep 11 18:07:09.996979 kernel: hv_netvsc f8615163-0000-1000-2000-002248a3d87f eth0: Data path switched to VF: enP30832s1 Sep 11 18:07:09.997361 systemd-networkd[1545]: enP30832s1: Link UP Sep 11 18:07:09.998470 systemd-networkd[1545]: enP30832s1: Gained carrier Sep 11 18:07:10.439804 disk-uuid[1723]: Warning: The kernel is still using the old partition table. Sep 11 18:07:10.439804 disk-uuid[1723]: The new table will be used at the next reboot or after you Sep 11 18:07:10.439804 disk-uuid[1723]: run partprobe(8) or kpartx(8) Sep 11 18:07:10.439804 disk-uuid[1723]: The operation has completed successfully. Sep 11 18:07:10.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.447527 systemd[1]: disk-uuid.service: Deactivated successfully. Sep 11 18:07:10.447655 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. Sep 11 18:07:10.453742 systemd[1]: Mounting boot.mount - Boot partition... Sep 11 18:07:10.513111 ignition[1765]: Ignition 2.24.0 Sep 11 18:07:10.513121 ignition[1765]: Stage: fetch-offline Sep 11 18:07:10.515496 systemd[1]: Mounted boot.mount - Boot partition. Sep 11 18:07:10.513781 ignition[1765]: no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:10.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.518161 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). Sep 11 18:07:10.513790 ignition[1765]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:10.524117 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... Sep 11 18:07:10.513894 ignition[1765]: parsed url from cmdline: "" Sep 11 18:07:10.513897 ignition[1765]: no config URL provided Sep 11 18:07:10.513902 ignition[1765]: reading system config file "/usr/lib/ignition/user.ign" Sep 11 18:07:10.513920 ignition[1765]: no config at "/usr/lib/ignition/user.ign" Sep 11 18:07:10.513925 ignition[1765]: failed to fetch config: resource requires networking Sep 11 18:07:10.514438 ignition[1765]: Ignition finished successfully Sep 11 18:07:10.549336 ignition[1798]: Ignition 2.24.0 Sep 11 18:07:10.549349 ignition[1798]: Stage: fetch Sep 11 18:07:10.549529 ignition[1798]: no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:10.549535 ignition[1798]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:10.549597 ignition[1798]: parsed url from cmdline: "" Sep 11 18:07:10.549599 ignition[1798]: no config URL provided Sep 11 18:07:10.549603 ignition[1798]: reading system config file "/usr/lib/ignition/user.ign" Sep 11 18:07:10.549610 ignition[1798]: no config at "/usr/lib/ignition/user.ign" Sep 11 18:07:10.549627 ignition[1798]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Sep 11 18:07:10.605380 ignition[1798]: GET result: OK Sep 11 18:07:10.605429 ignition[1798]: config has been read from IMDS userdata Sep 11 18:07:10.605439 ignition[1798]: parsing config with SHA512: 2a9845001a69ad8e73e18e76927c6193793a6ee10c38741574ebe9661d3b3d1cc79b955adf2de123a096aa2970eb01e4227cf398d91adf4a0dcee5a64ee572cf Sep 11 18:07:10.611831 unknown[1798]: fetched base config from "system" Sep 11 18:07:10.611841 unknown[1798]: fetched base config from "system" Sep 11 18:07:10.611988 ignition[1798]: fetch: fetch complete Sep 11 18:07:10.611846 unknown[1798]: fetched user config from "azure" Sep 11 18:07:10.611992 ignition[1798]: fetch: fetch passed Sep 11 18:07:10.614214 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). Sep 11 18:07:10.612053 ignition[1798]: Ignition finished successfully Sep 11 18:07:10.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.623857 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... Sep 11 18:07:10.642590 ignition[1804]: Ignition 2.24.0 Sep 11 18:07:10.642601 ignition[1804]: Stage: kargs Sep 11 18:07:10.642784 ignition[1804]: no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:10.644452 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). Sep 11 18:07:10.642790 ignition[1804]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:10.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.649941 systemd[1]: Starting ignition-disks.service - Ignition (disks)... Sep 11 18:07:10.643266 ignition[1804]: kargs: kargs passed Sep 11 18:07:10.643296 ignition[1804]: Ignition finished successfully Sep 11 18:07:10.712343 systemd[1]: ignition-kargs.service: Deactivated successfully. Sep 11 18:07:10.712439 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). Sep 11 18:07:10.714747 systemd[1]: ignition-fetch.service: Deactivated successfully. Sep 11 18:07:10.714858 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). Sep 11 18:07:10.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.719591 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Sep 11 18:07:10.719681 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). Sep 11 18:07:10.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.724410 systemd[1]: Unmounting oem.mount - /oem... Sep 11 18:07:10.745024 kernel: BTRFS info (device nvme0n1p6): last unmount of filesystem 4e58a52c-47dd-4c51-a521-e8e602003282 Sep 11 18:07:10.745921 systemd[1]: oem.mount: Deactivated successfully. Sep 11 18:07:10.746077 systemd[1]: Unmounted oem.mount - /oem. Sep 11 18:07:10.767453 ignition[1814]: Ignition 2.24.0 Sep 11 18:07:10.767463 ignition[1814]: Stage: disks Sep 11 18:07:10.767640 ignition[1814]: no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:10.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.769203 systemd[1]: Finished ignition-disks.service - Ignition (disks). Sep 11 18:07:10.767646 ignition[1814]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:10.772635 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. Sep 11 18:07:10.768135 ignition[1814]: disks: disks passed Sep 11 18:07:10.776082 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Sep 11 18:07:10.768166 ignition[1814]: Ignition finished successfully Sep 11 18:07:10.777889 systemd[1]: Reached target local-fs.target - Local File Systems. Sep 11 18:07:10.777935 systemd[1]: Reached target sysinit.target - System Initialization. Sep 11 18:07:10.778371 systemd[1]: Reached target basic.target - Basic System. Sep 11 18:07:10.779306 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... Sep 11 18:07:10.921327 systemd-fsck[1823]: ROOT: clean, 15/6361680 files, 408771/6359552 blocks Sep 11 18:07:10.924911 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. Sep 11 18:07:10.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:10.930223 systemd[1]: Mounting sysroot.mount - /sysroot... Sep 11 18:07:11.260068 kernel: EXT4-fs (nvme0n1p9): mounted filesystem 00611db9-871f-4328-8206-4106f91f5e66 r/w with ordered data mode. Quota mode: none. Sep 11 18:07:11.260219 systemd[1]: Mounted sysroot.mount - /sysroot. Sep 11 18:07:11.264440 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. Sep 11 18:07:11.283556 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... Sep 11 18:07:11.287363 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent... Sep 11 18:07:11.290512 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition skipped, unmet condition check ConditionPathIsReadWrite=!/sysroot Sep 11 18:07:11.290547 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. Sep 11 18:07:11.299230 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. Sep 11 18:07:11.308123 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... Sep 11 18:07:11.571630 systemd-tmpfiles[1853]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:1: Duplicate line for path "/sysroot/var", ignoring. Sep 11 18:07:11.571667 systemd-tmpfiles[1853]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:7: Duplicate line for path "/sysroot/var/empty", ignoring. Sep 11 18:07:11.571776 systemd-tmpfiles[1853]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:28: Duplicate line for path "/sysroot/var/log", ignoring. Sep 11 18:07:11.908389 coreos-metadata[1833]: Sep 11 18:07:11.908 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Sep 11 18:07:11.912429 coreos-metadata[1833]: Sep 11 18:07:11.912 INFO Fetch successful Sep 11 18:07:11.912429 coreos-metadata[1833]: Sep 11 18:07:11.912 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Sep 11 18:07:11.920577 coreos-metadata[1833]: Sep 11 18:07:11.920 INFO Fetch successful Sep 11 18:07:11.920577 coreos-metadata[1833]: Sep 11 18:07:11.920 INFO wrote hostname ci-4790.1.0-a-91c34937a3 to /sysroot/etc/hostname Sep 11 18:07:11.923021 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Sep 11 18:07:11.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:12.582024 kernel: loop1: detected capacity change from 0 to 44472 Sep 11 18:07:12.646029 kernel: loop1: p1 p2 p3 Sep 11 18:07:13.136045 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.136110 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:13.138625 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:13.139512 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:13.140038 systemd-confext[1913]: device-mapper: reload ioctl on loop1p1-14-verity (254:1) failed: Invalid argument Sep 11 18:07:13.150087 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.197026 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Sep 11 18:07:13.215022 kernel: loop2: detected capacity change from 0 to 44472 Sep 11 18:07:13.224047 kernel: loop2: p1 p2 p3 Sep 11 18:07:13.230991 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.231035 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:13.234238 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:13.234274 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:13.234320 (sd-merge)[1923]: device-mapper: reload ioctl on loop2p1-18-verity (254:1) failed: Invalid argument Sep 11 18:07:13.238259 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.256391 (sd-merge)[1923]: Using extensions '00-flatcar-default.raw'. Sep 11 18:07:13.257180 (sd-merge)[1923]: Merged extensions into '/sysroot/etc'. Sep 11 18:07:13.260521 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Sep 11 18:07:13.261427 initrd-setup-root[1930]: /etc 00-flatcar-default Fri 2026-09-11 18:07:07 UTC Sep 11 18:07:13.263553 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. Sep 11 18:07:13.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.270168 kernel: kauditd_printk_skb: 29 callbacks suppressed Sep 11 18:07:13.269036 systemd[1]: Starting ignition-mount.service - Ignition (mount)... Sep 11 18:07:13.273165 kernel: audit: type=1130 audit(1789150033.264:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.307390 ignition[1934]: INFO : Ignition 2.24.0 Sep 11 18:07:13.307390 ignition[1934]: INFO : Stage: mount Sep 11 18:07:13.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.315582 ignition[1934]: INFO : no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:13.315582 ignition[1934]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:13.315582 ignition[1934]: INFO : mount: mount passed Sep 11 18:07:13.315582 ignition[1934]: INFO : Ignition finished successfully Sep 11 18:07:13.309218 systemd[1]: Finished ignition-mount.service - Ignition (mount). Sep 11 18:07:13.320242 kernel: audit: type=1130 audit(1789150033.311:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.313300 systemd[1]: Starting ignition-files.service - Ignition (files)... Sep 11 18:07:13.334637 systemd[1]: Mounting oem.mount - /oem... Sep 11 18:07:13.344036 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/nvme0n1p6 (259:5) scanned by mount (1942) Sep 11 18:07:13.346932 kernel: BTRFS info (device nvme0n1p6): first mount of filesystem 4e58a52c-47dd-4c51-a521-e8e602003282 Sep 11 18:07:13.346964 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Sep 11 18:07:13.354145 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Sep 11 18:07:13.354190 kernel: BTRFS info (device nvme0n1p6): turning on async discard Sep 11 18:07:13.355448 kernel: BTRFS info (device nvme0n1p6): enabling free space tree Sep 11 18:07:13.357129 systemd[1]: Mounted oem.mount - /oem. Sep 11 18:07:13.358853 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Sep 11 18:07:13.371351 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Sep 11 18:07:13.391976 ignition[1960]: INFO : Ignition 2.24.0 Sep 11 18:07:13.391976 ignition[1960]: INFO : Stage: files Sep 11 18:07:13.394077 ignition[1960]: INFO : no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:13.394077 ignition[1960]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:13.394077 ignition[1960]: DEBUG : files: compiled without relabeling support, skipping Sep 11 18:07:13.399676 ignition[1960]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Sep 11 18:07:13.399676 ignition[1960]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Sep 11 18:07:13.404101 ignition[1960]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Sep 11 18:07:13.404101 ignition[1960]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Sep 11 18:07:13.404101 ignition[1960]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Sep 11 18:07:13.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.403716 unknown[1960]: wrote ssh authorized keys file for user: core Sep 11 18:07:13.418080 ignition[1960]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" Sep 11 18:07:13.418080 ignition[1960]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" Sep 11 18:07:13.418080 ignition[1960]: INFO : files: createResultFile: createFiles: op(4): [started] writing file "/sysroot/etc/.ignition-result.json" Sep 11 18:07:13.418080 ignition[1960]: INFO : files: createResultFile: createFiles: op(4): [finished] writing file "/sysroot/etc/.ignition-result.json" Sep 11 18:07:13.418080 ignition[1960]: INFO : files: files passed Sep 11 18:07:13.418080 ignition[1960]: INFO : Ignition finished successfully Sep 11 18:07:13.426714 kernel: audit: type=1130 audit(1789150033.409:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.409051 systemd[1]: Finished ignition-files.service - Ignition (files). Sep 11 18:07:13.416147 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... Sep 11 18:07:13.425333 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... Sep 11 18:07:13.442566 systemd[1]: ignition-quench.service: Deactivated successfully. Sep 11 18:07:13.442750 systemd[1]: Finished ignition-quench.service - Ignition (record completion). Sep 11 18:07:13.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.450043 kernel: audit: type=1130 audit(1789150033.446:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.453018 kernel: audit: type=1131 audit(1789150033.446:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:13.468607 initrd-setup-root-after-ignition[1993]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 11 18:07:13.468607 initrd-setup-root-after-ignition[1993]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory Sep 11 18:07:13.473613 initrd-setup-root-after-ignition[1997]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Sep 11 18:07:13.478027 kernel: loop3: detected capacity change from 0 to 44472 Sep 11 18:07:13.486211 kernel: loop3: p1 p2 p3 Sep 11 18:07:13.496500 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.496535 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:13.499915 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:13.499945 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:13.500643 systemd-confext[1999]: device-mapper: reload ioctl on loop3p1-21-verity (254:2) failed: Invalid argument Sep 11 18:07:13.505093 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.525022 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Sep 11 18:07:13.546026 kernel: loop4: detected capacity change from 0 to 44472 Sep 11 18:07:13.555020 kernel: loop4: p1 p2 p3 Sep 11 18:07:13.563660 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.563691 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:13.566162 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:13.566190 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:13.567407 (sd-merge)[2007]: device-mapper: reload ioctl on loop4p1-25-verity (254:2) failed: Invalid argument Sep 11 18:07:13.576040 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:13.587022 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Sep 11 18:07:13.587127 (sd-merge)[2007]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Sep 11 18:07:13.669035 kernel: loop4: detected capacity change from 0 to 404728 Sep 11 18:07:13.742142 kernel: loop4: p1 p2 p3 Sep 11 18:07:14.044583 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:14.044631 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:14.045794 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:14.047335 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:14.047366 systemd-sysext[2015]: device-mapper: reload ioctl on loop4p1-29-verity (254:2) failed: Invalid argument Sep 11 18:07:14.052041 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:14.256032 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Sep 11 18:07:14.348052 kernel: loop5: detected capacity change from 0 to 183704 Sep 11 18:07:14.477024 kernel: loop5: p1 p2 p3 Sep 11 18:07:14.760152 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:14.760204 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:14.761624 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:14.763228 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:14.763255 systemd-sysext[2015]: device-mapper: reload ioctl on loop5p1-33-verity (254:2) failed: Invalid argument Sep 11 18:07:14.768147 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:14.967024 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Sep 11 18:07:15.021034 kernel: loop6: detected capacity change from 0 to 137288 Sep 11 18:07:15.029250 kernel: loop6: p1 p2 p3 Sep 11 18:07:15.379644 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.379692 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:15.380823 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:15.381809 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:15.381850 systemd-sysext[2015]: device-mapper: reload ioctl on loop6p1-37-verity (254:2) failed: Invalid argument Sep 11 18:07:15.386309 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.539051 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Sep 11 18:07:15.580016 kernel: loop7: detected capacity change from 0 to 404728 Sep 11 18:07:15.591025 kernel: loop7: p1 p2 p3 Sep 11 18:07:15.600409 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.600439 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:15.602174 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:15.603601 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:15.603666 (sd-merge)[2038]: device-mapper: reload ioctl on loop7p1-41-verity (254:2) failed: Invalid argument Sep 11 18:07:15.609047 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.642039 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Sep 11 18:07:15.648018 kernel: loop1: detected capacity change from 0 to 183704 Sep 11 18:07:15.656022 kernel: loop1: p1 p2 p3 Sep 11 18:07:15.663419 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.663506 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:15.666023 kernel: device-mapper: table: 254:3: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:15.666117 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:15.667903 (sd-merge)[2038]: device-mapper: reload ioctl on loop1p1-45-verity (254:3) failed: Invalid argument Sep 11 18:07:15.672519 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.716888 kernel: erofs: (device dm-3): mounted with root inode @ nid 39. Sep 11 18:07:15.716921 kernel: loop3: detected capacity change from 0 to 137288 Sep 11 18:07:15.725022 kernel: loop3: p1 p2 p3 Sep 11 18:07:15.735762 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.735801 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:15.737268 kernel: device-mapper: table: 254:4: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:15.739040 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:15.739240 (sd-merge)[2038]: device-mapper: reload ioctl on loop3p1-49-verity (254:4) failed: Invalid argument Sep 11 18:07:15.744029 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:15.782635 (sd-merge)[2038]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-azure-4790.1.0.raw'. Sep 11 18:07:15.783593 (sd-merge)[2038]: Merged extensions into '/sysroot/usr'. Sep 11 18:07:15.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:15.791265 kernel: erofs: (device dm-4): mounted with root inode @ nid 39. Sep 11 18:07:15.785974 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. Sep 11 18:07:15.794124 kernel: audit: type=1130 audit(1789150035.787:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:15.792534 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... Sep 11 18:07:15.810943 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Sep 11 18:07:15.811113 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. Sep 11 18:07:15.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:15.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:15.822288 kernel: audit: type=1130 audit(1789150035.814:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:15.815193 systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies. Sep 11 18:07:15.825791 kernel: audit: type=1131 audit(1789150035.814:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:15.815514 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. Sep 11 18:07:15.826132 systemd[1]: Starting dracut-mount.service - dracut mount hook... Sep 11 18:07:16.185925 systemd[1]: Finished dracut-mount.service - dracut mount hook. Sep 11 18:07:16.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.191533 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... Sep 11 18:07:16.196210 kernel: audit: type=1130 audit(1789150036.189:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.214908 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Sep 11 18:07:16.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.220131 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... Sep 11 18:07:16.223175 kernel: audit: type=1130 audit(1789150036.216:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.234021 systemd[1]: Stopped target basic.target - Basic System. Sep 11 18:07:16.234191 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. Sep 11 18:07:16.234352 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. Sep 11 18:07:16.234649 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. Sep 11 18:07:16.234942 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. Sep 11 18:07:16.235191 systemd[1]: Stopped target paths.target - Path Units. Sep 11 18:07:16.245187 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. Sep 11 18:07:16.249168 systemd[1]: Stopped target slices.target - Slice Units. Sep 11 18:07:16.253168 systemd[1]: Stopped target sockets.target - Socket Units. Sep 11 18:07:16.261181 systemd[1]: Stopped target sysinit.target - System Initialization. Sep 11 18:07:16.266168 systemd[1]: Stopped target local-fs.target - Local File Systems. Sep 11 18:07:16.268617 systemd[1]: Stopped target local-fs-pre.target - Preparation for Local File Systems. Sep 11 18:07:16.273866 systemd[1]: Stopped target swap.target - Swaps. Sep 11 18:07:16.276148 systemd[1]: Stopped target timers.target - Timer Units. Sep 11 18:07:16.280992 systemd[1]: iscsid.socket: Deactivated successfully. Sep 11 18:07:16.281093 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. Sep 11 18:07:16.284780 systemd[1]: iscsiuio.socket: Deactivated successfully. Sep 11 18:07:16.284850 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. Sep 11 18:07:16.289361 systemd[1]: systemd-coredump.socket: Deactivated successfully. Sep 11 18:07:16.289435 systemd[1]: Closed systemd-coredump.socket - Process Core Dump Socket. Sep 11 18:07:16.290299 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. Sep 11 18:07:16.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.290364 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. Sep 11 18:07:16.295610 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Sep 11 18:07:16.295695 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Sep 11 18:07:16.301130 systemd[1]: Stopped target remote-fs.target - Remote File Systems. Sep 11 18:07:16.306082 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. Sep 11 18:07:16.311633 systemd[1]: dracut-mount.service: Deactivated successfully. Sep 11 18:07:16.311721 systemd[1]: Stopped dracut-mount.service - dracut mount hook. Sep 11 18:07:16.316000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.316330 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Sep 11 18:07:16.317571 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. Sep 11 18:07:16.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.317747 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. Sep 11 18:07:16.317910 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Sep 11 18:07:16.318136 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Sep 11 18:07:16.318351 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Sep 11 18:07:16.318547 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. Sep 11 18:07:16.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.318891 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Sep 11 18:07:16.319380 systemd[1]: dracut-initqueue.service: Deactivated successfully. Sep 11 18:07:16.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.319524 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. Sep 11 18:07:16.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.357272 ignition[2080]: INFO : Ignition 2.24.0 Sep 11 18:07:16.357272 ignition[2080]: INFO : Stage: umount Sep 11 18:07:16.357272 ignition[2080]: INFO : no config dir at "/usr/lib/ignition/base.d" Sep 11 18:07:16.357272 ignition[2080]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Sep 11 18:07:16.357272 ignition[2080]: INFO : umount: umount passed Sep 11 18:07:16.357272 ignition[2080]: INFO : Ignition finished successfully Sep 11 18:07:16.319784 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Sep 11 18:07:16.319890 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. Sep 11 18:07:16.320252 systemd[1]: ignition-files.service: Deactivated successfully. Sep 11 18:07:16.320345 systemd[1]: Stopped ignition-files.service - Ignition (files). Sep 11 18:07:16.320570 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Sep 11 18:07:16.320697 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Sep 11 18:07:16.323178 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... Sep 11 18:07:16.337081 systemd[1]: systemd-modules-load.service: Deactivated successfully. Sep 11 18:07:16.337202 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. Sep 11 18:07:16.343164 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. Sep 11 18:07:16.343290 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. Sep 11 18:07:16.353574 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Sep 11 18:07:16.353673 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. Sep 11 18:07:16.355275 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Sep 11 18:07:16.355379 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. Sep 11 18:07:16.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.383140 systemd[1]: ignition-mount.service: Deactivated successfully. Sep 11 18:07:16.384496 systemd[1]: Stopped ignition-mount.service - Ignition (mount). Sep 11 18:07:16.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.388555 systemd[1]: initrd-cleanup.service: Deactivated successfully. Sep 11 18:07:16.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.388644 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. Sep 11 18:07:16.389636 systemd[1]: Stopped target network.target - Network. Sep 11 18:07:16.394351 systemd[1]: ignition-disks.service: Deactivated successfully. Sep 11 18:07:16.394391 systemd[1]: Stopped ignition-disks.service - Ignition (disks). Sep 11 18:07:16.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.399555 systemd[1]: ignition-setup-pre.service: Deactivated successfully. Sep 11 18:07:16.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.399589 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. Sep 11 18:07:16.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.402761 systemd[1]: initrd-setup-root.service: Deactivated successfully. Sep 11 18:07:16.402791 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. Sep 11 18:07:16.406376 systemd[1]: Stopping systemd-networkd.service - Network Management... Sep 11 18:07:16.411121 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... Sep 11 18:07:16.421120 systemd[1]: systemd-resolved.service: Deactivated successfully. Sep 11 18:07:16.422600 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. Sep 11 18:07:16.425000 audit: BPF prog-id=5 op=UNLOAD Sep 11 18:07:16.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.429178 systemd[1]: systemd-networkd.service: Deactivated successfully. Sep 11 18:07:16.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.429290 systemd[1]: Stopped systemd-networkd.service - Network Management. Sep 11 18:07:16.433000 audit: BPF prog-id=8 op=UNLOAD Sep 11 18:07:16.434434 systemd[1]: systemd-networkd-resolve-hook.socket: Deactivated successfully. Sep 11 18:07:16.434515 systemd[1]: Closed systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Sep 11 18:07:16.438086 systemd[1]: Stopped target network-pre.target - Preparation for Network. Sep 11 18:07:16.442078 systemd[1]: systemd-networkd.socket: Deactivated successfully. Sep 11 18:07:16.442116 systemd[1]: Closed systemd-networkd.socket - Network Management Netlink Socket. Sep 11 18:07:16.448745 systemd[1]: Stopping network-cleanup.service - Network Cleanup... Sep 11 18:07:16.456066 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Sep 11 18:07:16.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.456110 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Sep 11 18:07:16.461521 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... Sep 11 18:07:16.487184 systemd[1]: systemd-udevd.service: Deactivated successfully. Sep 11 18:07:16.487335 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. Sep 11 18:07:16.491015 kernel: hv_netvsc f8615163-0000-1000-2000-002248a3d87f eth0: Data path switched from VF: enP30832s1 Sep 11 18:07:16.491238 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 Sep 11 18:07:16.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.496369 systemd[1]: network-cleanup.service: Deactivated successfully. Sep 11 18:07:16.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.496457 systemd[1]: Stopped network-cleanup.service - Network Cleanup. Sep 11 18:07:16.496920 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Sep 11 18:07:16.496981 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. Sep 11 18:07:16.504803 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Sep 11 18:07:16.504833 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. Sep 11 18:07:16.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.508822 systemd[1]: dracut-cmdline.service: Deactivated successfully. Sep 11 18:07:16.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.508850 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. Sep 11 18:07:16.516000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.513356 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Sep 11 18:07:16.513385 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Sep 11 18:07:16.520795 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... Sep 11 18:07:16.524622 systemd[1]: systemd-network-generator.service: Deactivated successfully. Sep 11 18:07:16.524668 systemd[1]: Stopped systemd-network-generator.service - Generate Network Units from Kernel Command Line. Sep 11 18:07:16.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.529697 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Sep 11 18:07:16.529732 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Sep 11 18:07:16.534711 systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. Sep 11 18:07:16.534745 systemd[1]: Stopped systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Sep 11 18:07:16.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.548119 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Sep 11 18:07:16.548150 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. Sep 11 18:07:16.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.552454 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 11 18:07:16.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:16.552482 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Sep 11 18:07:16.555652 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Sep 11 18:07:16.555787 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. Sep 11 18:07:16.561096 systemd[1]: Reached target initrd-switch-root.target - Switch Root. Sep 11 18:07:16.565132 systemd[1]: Starting initrd-switch-root.service - Switch Root... Sep 11 18:07:16.579097 systemd[1]: Switching root. Sep 11 18:07:16.624697 systemd-journald[1159]: Journal stopped Sep 11 18:07:22.647388 systemd-journald[1159]: Received SIGTERM from PID 1 (systemd). Sep 11 18:07:22.647414 kernel: SELinux: policy capability network_peer_controls=1 Sep 11 18:07:22.647423 kernel: SELinux: policy capability open_perms=1 Sep 11 18:07:22.647430 kernel: SELinux: policy capability extended_socket_class=1 Sep 11 18:07:22.647438 kernel: SELinux: policy capability always_check_network=0 Sep 11 18:07:22.647444 kernel: SELinux: policy capability cgroup_seclabel=1 Sep 11 18:07:22.647451 kernel: SELinux: policy capability nnp_nosuid_transition=1 Sep 11 18:07:22.647457 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Sep 11 18:07:22.647463 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Sep 11 18:07:22.647470 kernel: SELinux: policy capability userspace_initial_context=0 Sep 11 18:07:22.647478 systemd[1]: Successfully loaded SELinux policy in 465.845ms. Sep 11 18:07:22.647486 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 6.039ms. Sep 11 18:07:22.647494 systemd[1]: systemd 260.4 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Sep 11 18:07:22.647501 systemd[1]: Detected virtualization microsoft. Sep 11 18:07:22.647511 systemd[1]: Detected architecture x86-64. Sep 11 18:07:22.647518 systemd[1]: Detected first boot. Sep 11 18:07:22.647525 systemd[1]: Initializing machine ID from random generator. Sep 11 18:07:22.647532 systemd[1]: Hostname set to . Sep 11 18:07:22.647539 kernel: kauditd_printk_skb: 36 callbacks suppressed Sep 11 18:07:22.647547 kernel: audit: type=1334 audit(1789150039.327:87): prog-id=9 op=LOAD Sep 11 18:07:22.647554 kernel: audit: type=1334 audit(1789150039.327:88): prog-id=9 op=UNLOAD Sep 11 18:07:22.647561 zram_generator::config[2122]: No configuration found. Sep 11 18:07:22.647568 kernel: Guest personality initialized and is inactive Sep 11 18:07:22.647575 kernel: VMCI host device registered (name=vmci, major=10, minor=259) Sep 11 18:07:22.647581 kernel: Initialized host personality Sep 11 18:07:22.647589 kernel: NET: Registered PF_VSOCK protocol family Sep 11 18:07:22.647596 systemd[1]: Applying preset policy. Sep 11 18:07:22.647606 systemd[1]: Created symlink '/etc/systemd/system/timers.target.wants/google-oslogin-cache.timer' → '/usr/lib/systemd/system/google-oslogin-cache.timer'. Sep 11 18:07:22.647613 systemd[1]: Populated /etc with preset unit settings. Sep 11 18:07:22.647620 kernel: audit: type=1334 audit(1789150042.056:89): prog-id=10 op=LOAD Sep 11 18:07:22.647627 kernel: audit: type=1334 audit(1789150042.056:90): prog-id=2 op=UNLOAD Sep 11 18:07:22.647633 kernel: audit: type=1334 audit(1789150042.056:91): prog-id=11 op=LOAD Sep 11 18:07:22.647641 kernel: audit: type=1334 audit(1789150042.056:92): prog-id=12 op=LOAD Sep 11 18:07:22.647647 kernel: audit: type=1334 audit(1789150042.056:93): prog-id=3 op=UNLOAD Sep 11 18:07:22.647654 kernel: audit: type=1334 audit(1789150042.056:94): prog-id=4 op=UNLOAD Sep 11 18:07:22.647661 kernel: audit: type=1334 audit(1789150042.057:95): prog-id=13 op=LOAD Sep 11 18:07:22.647668 kernel: audit: type=1334 audit(1789150042.057:96): prog-id=10 op=UNLOAD Sep 11 18:07:22.647674 systemd[1]: initrd-switch-root.service: Deactivated successfully. Sep 11 18:07:22.647681 systemd[1]: Stopped initrd-switch-root.service - Switch Root. Sep 11 18:07:22.647690 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Sep 11 18:07:22.647700 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. Sep 11 18:07:22.647707 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. Sep 11 18:07:22.647714 systemd[1]: Created slice system-getty.slice - Slice /system/getty. Sep 11 18:07:22.647721 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. Sep 11 18:07:22.647729 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. Sep 11 18:07:22.647737 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. Sep 11 18:07:22.647745 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. Sep 11 18:07:22.647752 systemd[1]: Created slice user.slice - User and Session Slice. Sep 11 18:07:22.647759 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Sep 11 18:07:22.647767 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Sep 11 18:07:22.647775 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. Sep 11 18:07:22.647783 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. Sep 11 18:07:22.647818 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. Sep 11 18:07:22.647827 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Sep 11 18:07:22.647834 systemd[1]: Expecting device dev-ptp_hyperv.device - /dev/ptp_hyperv... Sep 11 18:07:22.647841 systemd[1]: Expecting device dev-ttyS0.device - /dev/ttyS0... Sep 11 18:07:22.647850 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Sep 11 18:07:22.647858 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Sep 11 18:07:22.647865 systemd[1]: Reached target imports.target - Image Downloads. Sep 11 18:07:22.647873 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. Sep 11 18:07:22.647880 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. Sep 11 18:07:22.647887 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. Sep 11 18:07:22.647894 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. Sep 11 18:07:22.647902 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Sep 11 18:07:22.647910 systemd[1]: Reached target remote-fs.target - Remote File Systems. Sep 11 18:07:22.647918 systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. Sep 11 18:07:22.647926 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. Sep 11 18:07:22.647934 systemd[1]: Reached target slices.target - Slice Units. Sep 11 18:07:22.647942 systemd[1]: Reached target swap.target - Swaps. Sep 11 18:07:22.647949 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. Sep 11 18:07:22.647956 systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Sep 11 18:07:22.647964 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Sep 11 18:07:22.647971 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. Sep 11 18:07:22.647978 systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. Sep 11 18:07:22.647987 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Sep 11 18:07:22.647994 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. Sep 11 18:07:22.648069 systemd[1]: Listening on systemd-mute-console.socket - Console Output Muting Service Socket. Sep 11 18:07:22.648083 systemd[1]: Listening on systemd-networkd-varlink-metrics.socket - Network Management Metrics Varlink Socket. Sep 11 18:07:22.648093 systemd[1]: Listening on systemd-networkd-varlink.socket - Network Management Varlink Socket. Sep 11 18:07:22.648104 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Sep 11 18:07:22.648115 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. Sep 11 18:07:22.648127 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. Sep 11 18:07:22.648138 systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. Sep 11 18:07:22.648149 systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. Sep 11 18:07:22.648161 systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. Sep 11 18:07:22.648172 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Sep 11 18:07:22.648183 systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. Sep 11 18:07:22.648196 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. Sep 11 18:07:22.648207 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... Sep 11 18:07:22.648218 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... Sep 11 18:07:22.648228 systemd[1]: Mounting media.mount - External Media Directory... Sep 11 18:07:22.648239 systemd[1]: proc-xen.mount - /proc/xen skipped, unmet condition check ConditionVirtualization=xen Sep 11 18:07:22.648250 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... Sep 11 18:07:22.648260 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... Sep 11 18:07:22.648272 systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. Sep 11 18:07:22.648284 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... Sep 11 18:07:22.648295 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... Sep 11 18:07:22.648306 systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. Sep 11 18:07:22.648317 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Sep 11 18:07:22.648328 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Sep 11 18:07:22.648342 systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm Sep 11 18:07:22.648356 systemd[1]: modprobe@efi_pstore.service - Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore Sep 11 18:07:22.648368 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Sep 11 18:07:22.648379 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf Sep 11 18:07:22.648390 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Sep 11 18:07:22.648401 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. Sep 11 18:07:22.648412 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 Sep 11 18:07:22.648426 systemd[1]: Starting systemd-journald.service - Journal Service... Sep 11 18:07:22.648436 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Sep 11 18:07:22.648447 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Sep 11 18:07:22.648458 systemd[1]: Reached target time-set.target - System Time Set. Sep 11 18:07:22.648470 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Sep 11 18:07:22.648481 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... Sep 11 18:07:22.648492 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Sep 11 18:07:22.648505 systemd[1]: xenserver-pv-version.service - Set fake PV driver version for XenServer skipped, unmet condition check ConditionVirtualization=xen Sep 11 18:07:22.648515 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. Sep 11 18:07:22.648526 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. Sep 11 18:07:22.648537 systemd[1]: Mounted media.mount - External Media Directory. Sep 11 18:07:22.648554 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. Sep 11 18:07:22.648586 systemd-journald[2198]: Collecting audit messages is enabled. Sep 11 18:07:22.648612 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. Sep 11 18:07:22.648625 kernel: fuse: init (API version 7.41) Sep 11 18:07:22.648636 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. Sep 11 18:07:22.648650 systemd-journald[2198]: Journal started Sep 11 18:07:22.648676 systemd-journald[2198]: Runtime Journal (/run/log/journal/5f768096a1ce401bb7ba191e03cd681a) is 8M, max 158.5M, 150.5M free. Sep 11 18:07:22.303000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 Sep 11 18:07:22.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.557000 audit: BPF prog-id=15 op=UNLOAD Sep 11 18:07:22.557000 audit: BPF prog-id=14 op=UNLOAD Sep 11 18:07:22.557000 audit: BPF prog-id=16 op=LOAD Sep 11 18:07:22.557000 audit: BPF prog-id=17 op=LOAD Sep 11 18:07:22.557000 audit: BPF prog-id=18 op=LOAD Sep 11 18:07:22.643000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Sep 11 18:07:22.643000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7fff9c562030 a2=4000 a3=0 items=0 ppid=1 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:07:22.643000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Sep 11 18:07:22.049043 systemd[1]: Queued start job for default target multi-user.target. Sep 11 18:07:22.058667 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device - /dev/nvme0n1p6. Sep 11 18:07:22.059077 systemd[1]: systemd-journald.service: Deactivated successfully. Sep 11 18:07:22.603968 systemd-modules-load[2199]: Using 2 probe threads Sep 11 18:07:22.653014 systemd[1]: Started systemd-journald.service - Journal Service. Sep 11 18:07:22.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.654174 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Sep 11 18:07:22.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.655966 systemd[1]: modprobe@configfs.service: Deactivated successfully. Sep 11 18:07:22.656152 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Sep 11 18:07:22.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.659350 systemd[1]: modprobe@fuse.service: Deactivated successfully. Sep 11 18:07:22.659506 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Sep 11 18:07:22.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.661391 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Sep 11 18:07:22.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.664484 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Sep 11 18:07:22.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.666185 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. Sep 11 18:07:22.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.673213 systemd[1]: Reached target network-pre.target - Preparation for Network. Sep 11 18:07:22.678861 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Sep 11 18:07:22.682105 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... Sep 11 18:07:22.689128 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... Sep 11 18:07:22.690969 systemd[1]: remount-root.service - Remount Root File System skipped, unmet condition check ConditionPathIsReadWrite=!/ Sep 11 18:07:22.702422 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... Sep 11 18:07:22.708130 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... Sep 11 18:07:22.710661 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore Sep 11 18:07:22.712160 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... Sep 11 18:07:22.721682 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Sep 11 18:07:22.728950 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Sep 11 18:07:22.735431 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. Sep 11 18:07:22.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.739791 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. Sep 11 18:07:22.745327 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. Sep 11 18:07:22.754887 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. Sep 11 18:07:22.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.757567 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. Sep 11 18:07:22.764400 systemd-journald[2198]: Time spent on flushing to /var/log/journal/5f768096a1ce401bb7ba191e03cd681a is 23.837ms for 1182 entries. Sep 11 18:07:22.764400 systemd-journald[2198]: System Journal (/var/log/journal/5f768096a1ce401bb7ba191e03cd681a) is 8M, max 2.2G, 2.2G free. Sep 11 18:07:22.815208 systemd-journald[2198]: Received client request to flush runtime journal. Sep 11 18:07:22.816117 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Sep 11 18:07:22.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.818324 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. Sep 11 18:07:22.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.840174 systemd-tmpfiles[2246]: ACLs are not supported, ignoring. Sep 11 18:07:22.840192 systemd-tmpfiles[2246]: ACLs are not supported, ignoring. Sep 11 18:07:22.843081 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Sep 11 18:07:22.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.881484 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Sep 11 18:07:22.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.890924 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. Sep 11 18:07:22.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:22.896136 systemd[1]: Starting systemd-sysusers.service - Create System Users... Sep 11 18:07:23.102213 systemd[1]: Finished systemd-sysusers.service - Create System Users. Sep 11 18:07:23.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.104941 systemd[1]: Starting systemd-journalctl.socket - Journal Log Access Socket... Sep 11 18:07:23.108000 audit: BPF prog-id=19 op=LOAD Sep 11 18:07:23.108000 audit: BPF prog-id=20 op=LOAD Sep 11 18:07:23.109000 audit: BPF prog-id=21 op=LOAD Sep 11 18:07:23.110473 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... Sep 11 18:07:23.112000 audit: BPF prog-id=22 op=LOAD Sep 11 18:07:23.114148 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Sep 11 18:07:23.117157 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Sep 11 18:07:23.119826 systemd[1]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Sep 11 18:07:23.124219 systemd[1]: Starting modprobe@tun.service - Load Kernel Module tun... Sep 11 18:07:23.127000 audit: BPF prog-id=23 op=LOAD Sep 11 18:07:23.127000 audit: BPF prog-id=24 op=LOAD Sep 11 18:07:23.127000 audit: BPF prog-id=25 op=LOAD Sep 11 18:07:23.132186 systemd[1]: Starting systemd-userdbd.service - User Database Manager... Sep 11 18:07:23.155536 systemd[1]: proc-sys-fs-binfmt_misc.automount: Got automount request for /proc/sys/fs/binfmt_misc, triggered by 2270 ((systemd-userd)) Sep 11 18:07:23.156675 systemd-tmpfiles[2268]: ACLs are not supported, ignoring. Sep 11 18:07:23.156695 systemd-tmpfiles[2268]: ACLs are not supported, ignoring. Sep 11 18:07:23.161430 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Sep 11 18:07:23.163000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.165214 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Sep 11 18:07:23.170104 systemd[1]: Mounting proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System... Sep 11 18:07:23.171918 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) skipped, unmet condition check ConditionPathExists=/var/lib/machines.raw Sep 11 18:07:23.171951 systemd[1]: Reached target local-fs.target - Local File Systems. Sep 11 18:07:23.173865 systemd[1]: Reached target machines.target - Virtual Machines and Containers. Sep 11 18:07:23.176172 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Sep 11 18:07:23.178898 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. Sep 11 18:07:23.185092 systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... Sep 11 18:07:23.191096 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... Sep 11 18:07:23.194883 systemd[1]: systemd-repart.service - Repartition Root Disk skipped, no trigger condition checks were met. Sep 11 18:07:23.198971 systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... Sep 11 18:07:23.204585 systemd[1]: Mounted proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System. Sep 11 18:07:23.207282 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats skipped, no trigger condition checks were met. Sep 11 18:07:23.226018 kernel: tun: Universal TUN/TAP device driver, 1.6 Sep 11 18:07:23.229414 systemd[1]: modprobe@tun.service: Deactivated successfully. Sep 11 18:07:23.229567 systemd[1]: Finished modprobe@tun.service - Load Kernel Module tun. Sep 11 18:07:23.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.231000 audit: BPF prog-id=26 op=LOAD Sep 11 18:07:23.232000 audit: BPF prog-id=27 op=LOAD Sep 11 18:07:23.232000 audit: BPF prog-id=28 op=LOAD Sep 11 18:07:23.233673 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... Sep 11 18:07:23.238795 systemd[1]: Finished systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials. Sep 11 18:07:23.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdb-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.261052 kernel: loop4: detected capacity change from 0 to 44472 Sep 11 18:07:23.264579 systemd[1]: Started systemd-userdbd.service - User Database Manager. Sep 11 18:07:23.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.280957 kernel: loop4: p1 p2 p3 Sep 11 18:07:23.281540 systemd-nsresourced[2282]: Not setting up BPF subsystem, as functionality has been disabled at compile time. Sep 11 18:07:23.284247 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. Sep 11 18:07:23.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.311272 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. Sep 11 18:07:23.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.377589 systemd-oomd[2266]: No swap; memory pressure usage will be degraded Sep 11 18:07:23.378730 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. Sep 11 18:07:23.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.407862 systemd-resolved[2267]: Positive Trust Anchors: Sep 11 18:07:23.407871 systemd-resolved[2267]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Sep 11 18:07:23.407874 systemd-resolved[2267]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Sep 11 18:07:23.407905 systemd-resolved[2267]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Sep 11 18:07:23.437069 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:23.437134 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:23.438722 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:23.440122 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:23.440695 systemd-confext[2278]: device-mapper: reload ioctl on loop4p1-53-verity (254:5) failed: Invalid argument Sep 11 18:07:23.444023 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:23.501349 systemd-resolved[2267]: Using system hostname 'ci-4790.1.0-a-91c34937a3'. Sep 11 18:07:23.502376 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Sep 11 18:07:23.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.503716 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Sep 11 18:07:23.628024 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. Sep 11 18:07:23.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:23.629000 audit: BPF prog-id=7 op=UNLOAD Sep 11 18:07:23.629000 audit: BPF prog-id=6 op=UNLOAD Sep 11 18:07:23.629000 audit: BPF prog-id=29 op=LOAD Sep 11 18:07:23.629000 audit: BPF prog-id=30 op=LOAD Sep 11 18:07:23.631366 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Sep 11 18:07:23.881700 systemd-udevd[2302]: Using default interface naming scheme 'v260'. Sep 11 18:07:24.084604 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Sep 11 18:07:24.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.086000 audit: BPF prog-id=31 op=LOAD Sep 11 18:07:24.090152 systemd[1]: Starting systemd-networkd.service - Network Management... Sep 11 18:07:24.160208 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Sep 11 18:07:24.203339 systemd[1]: Condition check resulted in dev-ttyS0.device - /dev/ttyS0 being skipped. Sep 11 18:07:24.252023 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#216 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Sep 11 18:07:24.288028 kernel: mousedev: PS/2 mouse device common for all mice Sep 11 18:07:24.291349 systemd-networkd[2304]: lo: Link UP Sep 11 18:07:24.291359 systemd-networkd[2304]: lo: Gained carrier Sep 11 18:07:24.293758 systemd[1]: Started systemd-networkd.service - Network Management. Sep 11 18:07:24.294759 systemd-networkd[2304]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Sep 11 18:07:24.294813 systemd-networkd[2304]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Sep 11 18:07:24.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.299420 kernel: mana 7870:00:00.0 enP30832s1: Configured vPort 0 PD 18 DB 16 Sep 11 18:07:24.298178 systemd[1]: Reached target network.target - Network. Sep 11 18:07:24.303227 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... Sep 11 18:07:24.306421 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Online... Sep 11 18:07:24.311025 kernel: mana 7870:00:00.0 enP30832s1: Configured steering vPort 0 entries 64 Sep 11 18:07:24.318664 kernel: hv_vmbus: registering driver hv_balloon Sep 11 18:07:24.318715 kernel: hv_netvsc f8615163-0000-1000-2000-002248a3d87f eth0: Data path switched to VF: enP30832s1 Sep 11 18:07:24.322052 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Sep 11 18:07:24.323432 systemd-networkd[2304]: enP30832s1: Link UP Sep 11 18:07:24.323941 systemd-networkd[2304]: eth0: Link UP Sep 11 18:07:24.324014 systemd-networkd[2304]: eth0: Gained carrier Sep 11 18:07:24.324220 systemd-networkd[2304]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Sep 11 18:07:24.330326 systemd-networkd[2304]: enP30832s1: Gained carrier Sep 11 18:07:24.337806 systemd-networkd[2304]: eth0: DHCPv4 address 10.0.0.33/24, gateway 10.0.0.1 acquired from 168.63.129.16 Sep 11 18:07:24.338015 kernel: hv_vmbus: registering driver hyperv_fb Sep 11 18:07:24.341064 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Sep 11 18:07:24.341295 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Sep 11 18:07:24.344061 kernel: Console: switching to colour dummy device 80x25 Sep 11 18:07:24.347027 kernel: Console: switching to colour frame buffer device 128x48 Sep 11 18:07:24.355965 systemd[1]: Condition check resulted in dev-ptp_hyperv.device - /dev/ptp_hyperv being skipped. Sep 11 18:07:24.394060 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. Sep 11 18:07:24.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.400029 kernel: kauditd_printk_skb: 62 callbacks suppressed Sep 11 18:07:24.400055 kernel: audit: type=1130 audit(1789150044.397:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.405879 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Sep 11 18:07:24.549350 kernel: kvm_intel: Using Hyper-V Enlightened VMCS Sep 11 18:07:24.555050 kernel: cpu_based_exec_ctrl unsupported with eVMCS: 0x20000 Sep 11 18:07:24.560587 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Sep 11 18:07:24.609029 kernel: loop4: detected capacity change from 0 to 44472 Sep 11 18:07:24.616022 kernel: loop4: p1 p2 p3 Sep 11 18:07:24.618398 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Sep 11 18:07:24.618757 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Sep 11 18:07:24.620023 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.627071 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:24.627116 kernel: audit: type=1130 audit(1789150044.621:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.627146 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:24.628270 (sd-merge)[2386]: device-mapper: reload ioctl on loop4p1-58-verity (254:5) failed: Invalid argument Sep 11 18:07:24.629033 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:24.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.635096 kernel: audit: type=1131 audit(1789150044.621:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.638049 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.645410 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - MSFT NVMe Accelerator v1.0 OEM. Sep 11 18:07:24.651189 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... Sep 11 18:07:24.655195 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Sep 11 18:07:24.671022 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Sep 11 18:07:24.673260 (sd-merge)[2386]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Sep 11 18:07:24.678874 systemd[1]: Finished systemd-confext.service - Merge System Configuration Images into /etc/. Sep 11 18:07:24.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.684032 kernel: audit: type=1130 audit(1789150044.680:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.688160 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... Sep 11 18:07:24.709025 kernel: loop4: detected capacity change from 0 to 404728 Sep 11 18:07:24.718034 kernel: loop4: p1 p2 p3 Sep 11 18:07:24.730579 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.730627 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:24.730644 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:24.734230 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:24.734566 systemd-sysext[2399]: device-mapper: reload ioctl on loop4p1-62-verity (254:5) failed: Invalid argument Sep 11 18:07:24.739044 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.760124 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. Sep 11 18:07:24.762294 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Sep 11 18:07:24.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.766142 kernel: audit: type=1130 audit(1789150044.761:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.786023 kernel: loop4: detected capacity change from 0 to 183704 Sep 11 18:07:24.792022 kernel: loop4: p1 p2 p3 Sep 11 18:07:24.800598 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.800635 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:24.801953 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:24.802943 systemd-sysext[2399]: device-mapper: reload ioctl on loop4p1-67-verity (254:5) failed: Invalid argument Sep 11 18:07:24.803044 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:24.806019 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.826030 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Sep 11 18:07:24.849026 kernel: loop4: detected capacity change from 0 to 137288 Sep 11 18:07:24.855017 kernel: loop4: p1 p2 p3 Sep 11 18:07:24.866572 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.866617 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:24.867780 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:24.869143 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:24.869165 systemd-sysext[2399]: device-mapper: reload ioctl on loop4p1-72-verity (254:5) failed: Invalid argument Sep 11 18:07:24.872033 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.892059 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Sep 11 18:07:24.910026 kernel: loop4: detected capacity change from 0 to 404728 Sep 11 18:07:24.921021 kernel: loop4: p1 p2 p3 Sep 11 18:07:24.931777 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.931824 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:24.933000 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:24.935052 (sd-merge)[2424]: device-mapper: reload ioctl on loop4p1-77-verity (254:5) failed: Invalid argument Sep 11 18:07:24.936028 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:24.938024 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.955145 systemd-vconsole-setup[2394]: Configuration of first virtual console was skipped, ignoring remaining ones. Sep 11 18:07:24.956108 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Sep 11 18:07:24.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.963354 kernel: audit: type=1130 audit(1789150044.958:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:24.965166 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Sep 11 18:07:24.968022 kernel: loop5: detected capacity change from 0 to 183704 Sep 11 18:07:24.982019 kernel: loop5: p1 p2 p3 Sep 11 18:07:24.985776 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:24.985827 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:24.986875 kernel: device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:24.988025 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:24.988240 (sd-merge)[2424]: device-mapper: reload ioctl on loop5p1-81-verity (254:6) failed: Invalid argument Sep 11 18:07:24.989310 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:25.015039 kernel: erofs: (device dm-6): mounted with root inode @ nid 39. Sep 11 18:07:25.017034 kernel: loop6: detected capacity change from 0 to 137288 Sep 11 18:07:25.026113 kernel: loop6: p1 p2 p3 Sep 11 18:07:25.033022 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:25.033066 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Sep 11 18:07:25.034784 kernel: device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) Sep 11 18:07:25.036640 kernel: device-mapper: ioctl: error adding target to table Sep 11 18:07:25.036588 (sd-merge)[2424]: device-mapper: reload ioctl on loop6p1-85-verity (254:7) failed: Invalid argument Sep 11 18:07:25.039053 kernel: device-mapper: verity: sha256 using shash "sha256-ni" Sep 11 18:07:25.060051 kernel: erofs: (device dm-7): mounted with root inode @ nid 39. Sep 11 18:07:25.060250 (sd-merge)[2424]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Sep 11 18:07:25.061945 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. Sep 11 18:07:25.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.066718 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Sep 11 18:07:25.068419 kernel: audit: type=1130 audit(1789150045.062:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.081352 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/base_image_var.conf:29: Duplicate line for path "/var/log/audit", ignoring. Sep 11 18:07:25.082222 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/base_image_var_late.conf:44: Duplicate line for path "/var/log/audit", ignoring. Sep 11 18:07:25.082547 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/baselayout.conf:15: Duplicate line for path "/var", ignoring. Sep 11 18:07:25.082556 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/baselayout.conf:16: Duplicate line for path "/var/empty", ignoring. Sep 11 18:07:25.082574 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/baselayout.conf:21: Duplicate line for path "/var/log", ignoring. Sep 11 18:07:25.082688 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/dbus.conf:5: Duplicate line for path "/var/lib/dbus", ignoring. Sep 11 18:07:25.082913 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/nfs-utils.conf:2: Duplicate line for path "/var/lib/nfs/v4recovery", ignoring. Sep 11 18:07:25.083907 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. Sep 11 18:07:25.083929 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. Sep 11 18:07:25.084143 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Sep 11 18:07:25.085479 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Duplicate line for path "/var/lib/tpm2-tss/system/keystore", ignoring. Sep 11 18:07:25.085495 systemd-tmpfiles[2447]: ACLs are not supported, ignoring. Sep 11 18:07:25.085553 systemd-tmpfiles[2447]: ACLs are not supported, ignoring. Sep 11 18:07:25.086093 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/var.conf:10: Duplicate line for path "/var", ignoring. Sep 11 18:07:25.086106 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Sep 11 18:07:25.086169 systemd-tmpfiles[2447]: /usr/lib/tmpfiles.d/var.conf:21: Duplicate line for path "/var/lib", ignoring. Sep 11 18:07:25.096945 systemd-tmpfiles[2447]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Sep 11 18:07:25.096958 systemd-tmpfiles[2447]: Skipping /boot Sep 11 18:07:25.101847 systemd-tmpfiles[2447]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Sep 11 18:07:25.101859 systemd-tmpfiles[2447]: Skipping /boot Sep 11 18:07:25.107607 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Sep 11 18:07:25.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.113139 systemd[1]: Starting audit-rules.service - Load Audit Rules... Sep 11 18:07:25.115136 kernel: audit: type=1130 audit(1789150045.109:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.118307 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... Sep 11 18:07:25.123052 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... Sep 11 18:07:25.127258 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... Sep 11 18:07:25.132635 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... Sep 11 18:07:25.150000 audit[2453]: AUDIT1127 pid=2453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.156386 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. Sep 11 18:07:25.157152 kernel: audit: type=1127 audit(1789150045.150:165): pid=2453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.164428 kernel: audit: type=1130 audit(1789150045.158:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.241159 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. Sep 11 18:07:25.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:25.323000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Sep 11 18:07:25.323000 audit[2477]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe5d944f00 a2=420 a3=0 items=0 ppid=2449 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:07:25.324690 augenrules[2477]: No rules Sep 11 18:07:25.323000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 11 18:07:25.324992 systemd[1]: audit-rules.service: Deactivated successfully. Sep 11 18:07:25.325242 systemd[1]: Finished audit-rules.service - Load Audit Rules. Sep 11 18:07:25.577238 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. Sep 11 18:07:25.580234 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt skipped, unmet condition check ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt Sep 11 18:07:26.019251 systemd-networkd[2304]: eth0: Gained IPv6LL Sep 11 18:07:26.021022 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Online. Sep 11 18:07:26.025273 systemd[1]: Reached target network-online.target - Network is Online. Sep 11 18:07:31.584691 ldconfig[2451]: ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Sep 11 18:07:31.598217 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. Sep 11 18:07:31.602299 systemd[1]: Starting systemd-update-done.service - Update is Completed... Sep 11 18:07:31.617058 systemd[1]: Finished systemd-update-done.service - Update is Completed. Sep 11 18:07:31.618819 systemd[1]: Reached target sysinit.target - System Initialization. Sep 11 18:07:31.620390 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. Sep 11 18:07:31.624204 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. Sep 11 18:07:31.628082 systemd[1]: Started google-oslogin-cache.timer - NSS cache refresh timer. Sep 11 18:07:31.629588 systemd[1]: Started logrotate.timer - Daily rotation of log files. Sep 11 18:07:31.630956 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. Sep 11 18:07:31.634067 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. Sep 11 18:07:31.637088 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. Sep 11 18:07:31.638673 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. Sep 11 18:07:31.642052 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer skipped, unmet condition check ConditionPathExists=/usr/.noupdate Sep 11 18:07:31.642089 systemd[1]: Reached target paths.target - Path Units. Sep 11 18:07:31.643106 systemd[1]: Reached target timers.target - Timer Units. Sep 11 18:07:31.646535 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. Sep 11 18:07:31.649444 systemd[1]: Starting docker.socket - Docker Socket for the API... Sep 11 18:07:31.651973 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). Sep 11 18:07:31.654733 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. Sep 11 18:07:31.657295 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. Sep 11 18:07:31.659151 systemd[1]: Listening on systemd-logind-varlink.socket - User Login Management Varlink Socket. Sep 11 18:07:31.662261 systemd[1]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Sep 11 18:07:31.665569 systemd[1]: Listening on docker.socket - Docker Socket for the API. Sep 11 18:07:31.668842 systemd[1]: Reached target sockets.target - Socket Units. Sep 11 18:07:31.672063 systemd[1]: Reached target basic.target - Basic System. Sep 11 18:07:31.673196 systemd[1]: addon-config@oem.service - Configure Addon /oem skipped, no trigger condition checks were met. Sep 11 18:07:31.673218 systemd[1]: addon-run@oem.service - Run Addon /oem skipped, no trigger condition checks were met. Sep 11 18:07:31.674794 systemd[1]: Starting chronyd.service - NTP client/server... Sep 11 18:07:31.679111 systemd[1]: Starting containerd.service - containerd container runtime... Sep 11 18:07:31.689145 systemd[1]: Starting dbus.service - D-Bus System Message Bus... Sep 11 18:07:31.693332 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... Sep 11 18:07:31.699119 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... Sep 11 18:07:31.705631 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... Sep 11 18:07:31.707412 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS skipped, unmet condition check ConditionPathExists=/oem/bin/flatcar-setup-environment Sep 11 18:07:31.709223 systemd[1]: Starting google-oslogin-cache.service - NSS cache refresh... Sep 11 18:07:31.711413 systemd[1]: hv_fcopy_uio_daemon.service - Hyper-V FCOPY UIO daemon skipped, unmet condition check ConditionPathExists=/sys/bus/vmbus/devices/eb765408-105f-49b6-b4aa-c123b64d17d4/uio Sep 11 18:07:31.715234 systemd[1]: Started hv_kvp_daemon.service - Hyper-V KVP daemon. Sep 11 18:07:31.719161 systemd[1]: hv_vss_daemon.service - Hyper-V VSS daemon skipped, unmet condition check ConditionPathExists=/dev/vmbus/hv_vss Sep 11 18:07:31.726728 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... Sep 11 18:07:31.730254 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... Sep 11 18:07:31.733102 KVP[2500]: KVP starting; pid is:2500 Sep 11 18:07:31.735478 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... Sep 11 18:07:31.740942 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... Sep 11 18:07:31.744363 kernel: hv_utils: KVP IC version 4.0 Sep 11 18:07:31.745050 KVP[2500]: KVP LIC Version: 3.1 Sep 11 18:07:31.745490 jq[2497]: false Sep 11 18:07:31.749920 systemd[1]: Starting systemd-logind.service - User Login Management... Sep 11 18:07:31.753128 systemd[1]: tcsd.service - TCG Core Services Daemon skipped, unmet condition check ConditionPathExists=/dev/tpm0 Sep 11 18:07:31.755785 systemd[1]: Starting update-engine.service - Update Engine... Sep 11 18:07:31.764538 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... Sep 11 18:07:31.769060 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. Sep 11 18:07:31.771596 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Sep 11 18:07:31.771803 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. Sep 11 18:07:31.772121 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Sep 11 18:07:31.773065 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. Sep 11 18:07:31.783090 extend-filesystems[2498]: Found /dev/nvme0n1p6 Sep 11 18:07:31.788405 google_oslogin_nss_cache[2499]: oslogin_cache_refresh[2499]: Refreshing passwd entry cache Sep 11 18:07:31.788645 oslogin_cache_refresh[2499]: Refreshing passwd entry cache Sep 11 18:07:31.799354 jq[2510]: true Sep 11 18:07:31.799560 motdgen[2529]: /oem/oem-release: line 2: Azure: command not found Sep 11 18:07:31.801155 chronyd[2493]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER -SIGND +NTS +SECHASH +IPV6 -DEBUG) Sep 11 18:07:31.811207 google_oslogin_nss_cache[2499]: oslogin_cache_refresh[2499]: Failure getting users, quitting Sep 11 18:07:31.811207 google_oslogin_nss_cache[2499]: oslogin_cache_refresh[2499]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Sep 11 18:07:31.811207 google_oslogin_nss_cache[2499]: oslogin_cache_refresh[2499]: Refreshing group entry cache Sep 11 18:07:31.810861 oslogin_cache_refresh[2499]: Failure getting users, quitting Sep 11 18:07:31.810875 oslogin_cache_refresh[2499]: Produced empty passwd cache file, removing /etc/oslogin_passwd.cache.bak. Sep 11 18:07:31.810905 oslogin_cache_refresh[2499]: Refreshing group entry cache Sep 11 18:07:31.811391 extend-filesystems[2498]: Found /dev/nvme0n1p9 Sep 11 18:07:31.815121 extend-filesystems[2498]: Checking size of /dev/nvme0n1p9 Sep 11 18:07:31.817474 systemd[1]: motdgen.service: Deactivated successfully. Sep 11 18:07:31.817686 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. Sep 11 18:07:31.823393 jq[2532]: true Sep 11 18:07:31.835821 chronyd[2493]: Timezone right/UTC failed leap second check, ignoring Sep 11 18:07:31.836812 chronyd[2493]: Loaded seccomp filter (level 2) Sep 11 18:07:31.836946 systemd[1]: Started chronyd.service - NTP client/server. Sep 11 18:07:31.848987 google_oslogin_nss_cache[2499]: oslogin_cache_refresh[2499]: Failure getting groups, quitting Sep 11 18:07:31.848987 google_oslogin_nss_cache[2499]: oslogin_cache_refresh[2499]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Sep 11 18:07:31.848130 oslogin_cache_refresh[2499]: Failure getting groups, quitting Sep 11 18:07:31.848140 oslogin_cache_refresh[2499]: Produced empty group cache file, removing /etc/oslogin_group.cache.bak. Sep 11 18:07:31.849407 systemd[1]: google-oslogin-cache.service: Deactivated successfully. Sep 11 18:07:31.849891 systemd[1]: Finished google-oslogin-cache.service - NSS cache refresh. Sep 11 18:07:31.851789 update_engine[2509]: I20260911 18:07:31.851325 2509 main.cc:92] Flatcar Update Engine starting Sep 11 18:07:31.857392 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. Sep 11 18:07:31.871064 extend-filesystems[2498]: Resized partition /dev/nvme0n1p9 Sep 11 18:07:31.908041 sshd_keygen[2526]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 MLDSA44-ED25519 Sep 11 18:07:31.914726 systemd-logind[2508]: New seat seat0. Sep 11 18:07:31.923754 systemd-logind[2508]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 11 18:07:31.924063 systemd[1]: Started systemd-logind.service - User Login Management. Sep 11 18:07:31.939031 extend-filesystems[2583]: resize2fs 1.47.4 (6-Mar-2025) Sep 11 18:07:31.950197 dbus-daemon[2495]: [system] SELinux support is enabled Sep 11 18:07:31.950349 systemd[1]: Started dbus.service - D-Bus System Message Bus. Sep 11 18:07:31.953392 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. Sep 11 18:07:31.957847 systemd[1]: Starting issuegen.service - Generate /run/issue... Sep 11 18:07:31.959508 systemd[1]: system-cloudinit@usr-share-coreos-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/coreos/cloud-config.yml skipped, unmet condition check ConditionFileNotEmpty=/usr/share/coreos/cloud-config.yml Sep 11 18:07:31.964542 update_engine[2509]: I20260911 18:07:31.962505 2509 update_check_scheduler.cc:74] Next update check in 3m40s Sep 11 18:07:31.959538 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. Sep 11 18:07:31.961632 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline skipped, unmet condition check ConditionKernelCommandLine=cloud-config-url Sep 11 18:07:31.961652 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. Sep 11 18:07:31.967024 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 6359552 to 6376955 blocks Sep 11 18:07:31.967135 systemd[1]: Starting waagent.service - Microsoft Azure Linux Agent... Sep 11 18:07:31.972024 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 6376955 Sep 11 18:07:31.978347 systemd[1]: Started update-engine.service - Update Engine. Sep 11 18:07:31.979854 dbus-daemon[2495]: [system] Successfully activated service 'org.freedesktop.systemd1' Sep 11 18:07:31.981559 systemd[1]: Started locksmithd.service - Cluster reboot manager. Sep 11 18:07:31.997521 systemd[1]: issuegen.service: Deactivated successfully. Sep 11 18:07:31.998442 systemd[1]: Finished issuegen.service - Generate /run/issue. Sep 11 18:07:32.009471 extend-filesystems[2583]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Sep 11 18:07:32.009471 extend-filesystems[2583]: old_desc_blocks = 4, new_desc_blocks = 4 Sep 11 18:07:32.009471 extend-filesystems[2583]: The filesystem on /dev/nvme0n1p9 is now 6376955 (4k) blocks long. Sep 11 18:07:32.016825 extend-filesystems[2498]: Resized filesystem in /dev/nvme0n1p9 Sep 11 18:07:32.017429 bash[2565]: Updated "/home/core/.ssh/authorized_keys" Sep 11 18:07:32.017225 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... Sep 11 18:07:32.020315 systemd[1]: extend-filesystems.service: Deactivated successfully. Sep 11 18:07:32.022679 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. Sep 11 18:07:32.025301 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. Sep 11 18:07:32.052088 systemd[1]: Started waagent.service - Microsoft Azure Linux Agent. Sep 11 18:07:32.069217 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. Sep 11 18:07:32.097301 systemd[1]: Started getty@tty1.service - Getty on tty1. Sep 11 18:07:32.102061 systemd[1]: Started serial-getty@ttyS0.service - Serial Getty on ttyS0. Sep 11 18:07:32.104474 systemd[1]: Reached target getty.target - Login Prompts. Sep 11 18:07:32.108341 systemd[1]: sshkeys.service skipped, no trigger condition checks were met. Sep 11 18:07:32.234828 locksmithd[2609]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Sep 11 18:07:34.067669 containerd[2527]: time="2026-09-11T18:07:34Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 Sep 11 18:07:34.068332 containerd[2527]: time="2026-09-11T18:07:34.068257022Z" level=info msg="starting containerd" revision=e53c7c1516c3b2bff98eb76f1f4117477e6f4e66 version=v2.2.5 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079361090Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="8.08µs" Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079391935Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079431521Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079442180Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079555357Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079562856Z" level=info msg="loading plugin" id=io.containerd.mount-handler.v1.erofs type=io.containerd.mount-handler.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079570038Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079600812Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079606816Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079744642Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079750697Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080039 containerd[2527]: time="2026-09-11T18:07:34.079756666Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080241 containerd[2527]: time="2026-09-11T18:07:34.079761857Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080241 containerd[2527]: time="2026-09-11T18:07:34.079851642Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080241 containerd[2527]: time="2026-09-11T18:07:34.079880634Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080241 containerd[2527]: time="2026-09-11T18:07:34.079967114Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080241 containerd[2527]: time="2026-09-11T18:07:34.079980377Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Sep 11 18:07:34.080241 containerd[2527]: time="2026-09-11T18:07:34.079985799Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 Sep 11 18:07:34.080661 containerd[2527]: time="2026-09-11T18:07:34.080629860Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 Sep 11 18:07:34.081049 containerd[2527]: time="2026-09-11T18:07:34.081021379Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 Sep 11 18:07:34.081117 containerd[2527]: time="2026-09-11T18:07:34.081103928Z" level=info msg="metadata content store policy set" policy=shared Sep 11 18:07:34.094481 containerd[2527]: time="2026-09-11T18:07:34.094454976Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 Sep 11 18:07:34.094568 containerd[2527]: time="2026-09-11T18:07:34.094512617Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 Sep 11 18:07:34.094568 containerd[2527]: time="2026-09-11T18:07:34.094543359Z" level=info msg="built-in NRI default validator is disabled" Sep 11 18:07:34.094568 containerd[2527]: time="2026-09-11T18:07:34.094550617Z" level=info msg="runtime interface created" Sep 11 18:07:34.094568 containerd[2527]: time="2026-09-11T18:07:34.094555382Z" level=info msg="created NRI interface" Sep 11 18:07:34.094648 containerd[2527]: time="2026-09-11T18:07:34.094571982Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Sep 11 18:07:34.113783 containerd[2527]: time="2026-09-11T18:07:34.113755815Z" level=info msg="loading plugin" id=io.containerd.mount-manager.v1.bolt type=io.containerd.mount-manager.v1 Sep 11 18:07:34.113905 containerd[2527]: time="2026-09-11T18:07:34.113885067Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 Sep 11 18:07:34.113945 containerd[2527]: time="2026-09-11T18:07:34.113908414Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 Sep 11 18:07:34.113945 containerd[2527]: time="2026-09-11T18:07:34.113921881Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 Sep 11 18:07:34.113945 containerd[2527]: time="2026-09-11T18:07:34.113941586Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 Sep 11 18:07:34.114020 containerd[2527]: time="2026-09-11T18:07:34.113952190Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 Sep 11 18:07:34.114020 containerd[2527]: time="2026-09-11T18:07:34.113963359Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 Sep 11 18:07:34.114020 containerd[2527]: time="2026-09-11T18:07:34.113975457Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 Sep 11 18:07:34.114020 containerd[2527]: time="2026-09-11T18:07:34.113986115Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 Sep 11 18:07:34.114020 containerd[2527]: time="2026-09-11T18:07:34.113996955Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 Sep 11 18:07:34.114124 containerd[2527]: time="2026-09-11T18:07:34.114020421Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 Sep 11 18:07:34.114124 containerd[2527]: time="2026-09-11T18:07:34.114032635Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 Sep 11 18:07:34.114124 containerd[2527]: time="2026-09-11T18:07:34.114114699Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 Sep 11 18:07:34.114192 containerd[2527]: time="2026-09-11T18:07:34.114134162Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 Sep 11 18:07:34.114192 containerd[2527]: time="2026-09-11T18:07:34.114145757Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 Sep 11 18:07:34.114192 containerd[2527]: time="2026-09-11T18:07:34.114155877Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 Sep 11 18:07:34.114192 containerd[2527]: time="2026-09-11T18:07:34.114166165Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 Sep 11 18:07:34.114192 containerd[2527]: time="2026-09-11T18:07:34.114175869Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 Sep 11 18:07:34.114192 containerd[2527]: time="2026-09-11T18:07:34.114185605Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 Sep 11 18:07:34.114301 containerd[2527]: time="2026-09-11T18:07:34.114195599Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 Sep 11 18:07:34.114301 containerd[2527]: time="2026-09-11T18:07:34.114206668Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.mounts type=io.containerd.grpc.v1 Sep 11 18:07:34.114301 containerd[2527]: time="2026-09-11T18:07:34.114215508Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 Sep 11 18:07:34.114301 containerd[2527]: time="2026-09-11T18:07:34.114226314Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 Sep 11 18:07:34.114301 containerd[2527]: time="2026-09-11T18:07:34.114236244Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 Sep 11 18:07:34.114301 containerd[2527]: time="2026-09-11T18:07:34.114257850Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 Sep 11 18:07:34.114415 containerd[2527]: time="2026-09-11T18:07:34.114301193Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" Sep 11 18:07:34.114415 containerd[2527]: time="2026-09-11T18:07:34.114313350Z" level=info msg="Start snapshots syncer" Sep 11 18:07:34.114415 containerd[2527]: time="2026-09-11T18:07:34.114330494Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 Sep 11 18:07:34.114626 containerd[2527]: time="2026-09-11T18:07:34.114591767Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" Sep 11 18:07:34.114742 containerd[2527]: time="2026-09-11T18:07:34.114641004Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 Sep 11 18:07:34.114765 containerd[2527]: time="2026-09-11T18:07:34.114744837Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.114940415Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.114960643Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.114973371Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.114983206Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.114993553Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115035866Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115046228Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115072769Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115083676Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115112546Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115127701Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115136270Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115145509Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Sep 11 18:07:34.115237 containerd[2527]: time="2026-09-11T18:07:34.115153776Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 Sep 11 18:07:34.115613 containerd[2527]: time="2026-09-11T18:07:34.115162995Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 Sep 11 18:07:34.115613 containerd[2527]: time="2026-09-11T18:07:34.115172321Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 Sep 11 18:07:34.115613 containerd[2527]: time="2026-09-11T18:07:34.115183300Z" level=info msg="Connect containerd service" Sep 11 18:07:34.115613 containerd[2527]: time="2026-09-11T18:07:34.115206917Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" Sep 11 18:07:34.116352 containerd[2527]: time="2026-09-11T18:07:34.116323240Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Sep 11 18:07:34.855984 containerd[2527]: time="2026-09-11T18:07:34.855864372Z" level=info msg="Start subscribing containerd event" Sep 11 18:07:34.856410 containerd[2527]: time="2026-09-11T18:07:34.856128533Z" level=info msg="Start recovering state" Sep 11 18:07:34.856410 containerd[2527]: time="2026-09-11T18:07:34.856382099Z" level=info msg="Start event monitor" Sep 11 18:07:34.856957 containerd[2527]: time="2026-09-11T18:07:34.856399244Z" level=info msg="Start cni network conf syncer for default" Sep 11 18:07:34.857018 containerd[2527]: time="2026-09-11T18:07:34.856968760Z" level=info msg="Start streaming server" Sep 11 18:07:34.857018 containerd[2527]: time="2026-09-11T18:07:34.856988077Z" level=info msg="Registered namespace \"k8s.io\" with NRI" Sep 11 18:07:34.857067 containerd[2527]: time="2026-09-11T18:07:34.856506986Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Sep 11 18:07:34.857128 containerd[2527]: time="2026-09-11T18:07:34.857114497Z" level=info msg=serving... address=/run/containerd/containerd.sock Sep 11 18:07:34.857273 containerd[2527]: time="2026-09-11T18:07:34.856995012Z" level=info msg="runtime interface starting up..." Sep 11 18:07:34.857273 containerd[2527]: time="2026-09-11T18:07:34.857180604Z" level=info msg="starting plugins..." Sep 11 18:07:34.857273 containerd[2527]: time="2026-09-11T18:07:34.857196248Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" Sep 11 18:07:34.857955 systemd[1]: Started containerd.service - containerd container runtime. Sep 11 18:07:34.860135 containerd[2527]: time="2026-09-11T18:07:34.858250488Z" level=info msg="containerd successfully booted in 0.790762s" Sep 11 18:07:34.860351 systemd[1]: Reached target multi-user.target - Multi-User System. Sep 11 18:07:34.862355 systemd[1]: Startup finished in 4.450s (kernel) + 11.431s (initrd) + 17.928s (userspace) = 33.810s. Sep 11 18:07:35.231875 login[2627]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 11 18:07:35.236992 systemd[1]: Created slice user-500.slice - User Slice of UID 500. Sep 11 18:07:35.238739 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... Sep 11 18:07:35.240896 systemd-logind[2508]: New session '1' of user 'core' with class 'user-light' and type 'tty'. Sep 11 18:07:35.282683 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. Sep 11 18:07:35.286471 systemd[1]: Started session-1.scope - Session 1 of User core. Sep 11 18:07:35.557645 login[2628]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Sep 11 18:07:35.561584 systemd-logind[2508]: New session '2' of user 'core' with class 'user-light' and type 'tty'. Sep 11 18:07:35.569149 systemd[1]: Started session-2.scope - Session 2 of User core. Sep 11 18:07:35.779995 waagent[2622]: 2026-09-11T18:07:35.779940Z INFO Daemon Daemon Azure Linux Agent Version: 2.12.0.4 Sep 11 18:07:35.780947 waagent[2622]: 2026-09-11T18:07:35.780905Z INFO Daemon Daemon OS: flatcar 4790.1.0 Sep 11 18:07:35.781074 waagent[2622]: 2026-09-11T18:07:35.781052Z INFO Daemon Daemon Python: 3.12.13 Sep 11 18:07:35.781743 waagent[2622]: 2026-09-11T18:07:35.781251Z INFO Daemon Daemon Run daemon Sep 11 18:07:35.781743 waagent[2622]: 2026-09-11T18:07:35.781394Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='4790.1.0' Sep 11 18:07:35.781743 waagent[2622]: 2026-09-11T18:07:35.781454Z INFO Daemon Daemon Using waagent for provisioning Sep 11 18:07:35.781743 waagent[2622]: 2026-09-11T18:07:35.781587Z INFO Daemon Daemon Activate resource disk Sep 11 18:07:35.781743 waagent[2622]: 2026-09-11T18:07:35.781648Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Sep 11 18:07:35.782902 waagent[2622]: 2026-09-11T18:07:35.782863Z INFO Daemon Daemon Found device: None Sep 11 18:07:35.783000 waagent[2622]: 2026-09-11T18:07:35.782979Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Sep 11 18:07:35.783102 waagent[2622]: 2026-09-11T18:07:35.783085Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Sep 11 18:07:35.783478 waagent[2622]: 2026-09-11T18:07:35.783442Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 11 18:07:35.783590 waagent[2622]: 2026-09-11T18:07:35.783565Z INFO Daemon Daemon Running default provisioning handler Sep 11 18:07:35.787673 waagent[2622]: 2026-09-11T18:07:35.787434Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 4. Sep 11 18:07:35.787933 waagent[2622]: 2026-09-11T18:07:35.787901Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Sep 11 18:07:35.788185 waagent[2622]: 2026-09-11T18:07:35.788162Z INFO Daemon Daemon cloud-init is enabled: False Sep 11 18:07:35.788444 waagent[2622]: 2026-09-11T18:07:35.788421Z INFO Daemon Daemon Copying ovf-env.xml Sep 11 18:07:35.873051 waagent[2622]: 2026-09-11T18:07:35.871957Z INFO Daemon Daemon Successfully mounted dvd Sep 11 18:07:35.943587 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Sep 11 18:07:35.945031 waagent[2622]: 2026-09-11T18:07:35.944682Z INFO Daemon Daemon Detect protocol endpoint Sep 11 18:07:35.945031 waagent[2622]: 2026-09-11T18:07:35.944865Z INFO Daemon Daemon Clean protocol and wireserver endpoint Sep 11 18:07:35.945223 waagent[2622]: 2026-09-11T18:07:35.945198Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Sep 11 18:07:35.945341 waagent[2622]: 2026-09-11T18:07:35.945322Z INFO Daemon Daemon Test for route to 168.63.129.16 Sep 11 18:07:35.945745 waagent[2622]: 2026-09-11T18:07:35.945721Z INFO Daemon Daemon Route to 168.63.129.16 exists Sep 11 18:07:35.945957 waagent[2622]: 2026-09-11T18:07:35.945941Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Sep 11 18:07:36.022157 waagent[2622]: 2026-09-11T18:07:36.022129Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Sep 11 18:07:36.023751 waagent[2622]: 2026-09-11T18:07:36.022454Z INFO Daemon Daemon Wire protocol version:2012-11-30 Sep 11 18:07:36.023751 waagent[2622]: 2026-09-11T18:07:36.022598Z INFO Daemon Daemon Server preferred version:2015-04-05 Sep 11 18:07:36.137940 waagent[2622]: 2026-09-11T18:07:36.137864Z INFO Daemon Daemon Initializing goal state during protocol detection Sep 11 18:07:36.139461 waagent[2622]: 2026-09-11T18:07:36.138048Z INFO Daemon Daemon Forcing an update of the goal state. Sep 11 18:07:36.143737 waagent[2622]: 2026-09-11T18:07:36.143699Z INFO Daemon Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 11 18:07:36.161603 waagent[2622]: 2026-09-11T18:07:36.161565Z INFO Daemon Daemon HostGAPlugin version: 1.0.8.185 Sep 11 18:07:36.162256 waagent[2622]: 2026-09-11T18:07:36.162130Z INFO Daemon Sep 11 18:07:36.162256 waagent[2622]: 2026-09-11T18:07:36.162252Z INFO Daemon Fetched new vmSettings [HostGAPlugin correlation ID: 14a20056-ca35-46e7-8ac2-84f19daadee1 eTag: 8221617458928542965 source: Fabric] Sep 11 18:07:36.162256 waagent[2622]: 2026-09-11T18:07:36.162535Z INFO Daemon The vmSettings originated via Fabric; will ignore them. Sep 11 18:07:36.162256 waagent[2622]: 2026-09-11T18:07:36.162931Z INFO Daemon Sep 11 18:07:36.162256 waagent[2622]: 2026-09-11T18:07:36.163103Z INFO Daemon Fetching full goal state from the WireServer [incarnation 1] Sep 11 18:07:36.170427 waagent[2622]: 2026-09-11T18:07:36.170405Z INFO Daemon Daemon Downloading artifacts profile blob Sep 11 18:07:36.228894 waagent[2622]: 2026-09-11T18:07:36.228851Z INFO Daemon Downloaded certificate {'thumbprint': '39079CA58D98713702F7BCCD9BC62057476B6B9C', 'hasPrivateKey': True} Sep 11 18:07:36.230907 waagent[2622]: 2026-09-11T18:07:36.230874Z INFO Daemon Fetch goal state completed Sep 11 18:07:36.237095 waagent[2622]: 2026-09-11T18:07:36.236993Z INFO Daemon Daemon Starting provisioning Sep 11 18:07:36.237393 waagent[2622]: 2026-09-11T18:07:36.237241Z INFO Daemon Daemon Handle ovf-env.xml. Sep 11 18:07:36.238963 waagent[2622]: 2026-09-11T18:07:36.237404Z INFO Daemon Daemon Set hostname [ci-4790.1.0-a-91c34937a3] Sep 11 18:07:36.239982 waagent[2622]: 2026-09-11T18:07:36.239758Z INFO Daemon Daemon Publish hostname [ci-4790.1.0-a-91c34937a3] Sep 11 18:07:36.241022 waagent[2622]: 2026-09-11T18:07:36.240149Z INFO Daemon Daemon Examine /proc/net/route for primary interface Sep 11 18:07:36.241022 waagent[2622]: 2026-09-11T18:07:36.240655Z INFO Daemon Daemon Primary interface is [eth0] Sep 11 18:07:36.249148 systemd-networkd[2304]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Sep 11 18:07:36.249157 systemd-networkd[2304]: eth0: Reconfiguring with /usr/lib/systemd/network/zz-default.network. Sep 11 18:07:36.249179 systemd-networkd[2304]: eth0: DHCP lease lost Sep 11 18:07:36.268108 waagent[2622]: 2026-09-11T18:07:36.268067Z INFO Daemon Daemon Create user account if not exists Sep 11 18:07:36.271053 waagent[2622]: 2026-09-11T18:07:36.268278Z INFO Daemon Daemon User core already exists, skip useradd Sep 11 18:07:36.271053 waagent[2622]: 2026-09-11T18:07:36.268429Z INFO Daemon Daemon Configure sudoer Sep 11 18:07:36.271053 waagent[2622]: 2026-09-11T18:07:36.268913Z INFO Daemon Daemon Configure sshd Sep 11 18:07:36.271053 waagent[2622]: 2026-09-11T18:07:36.269169Z INFO Daemon Daemon Added a configuration snippet disabling SSH password-based authentication methods. It also configures SSH client probing to keep connections alive. Sep 11 18:07:36.271053 waagent[2622]: 2026-09-11T18:07:36.269345Z INFO Daemon Daemon Deploy ssh public key. Sep 11 18:07:36.282048 systemd-networkd[2304]: eth0: DHCPv4 address 10.0.0.33/24, gateway 10.0.0.1 acquired from 168.63.129.16 Sep 11 18:07:37.395713 waagent[2622]: 2026-09-11T18:07:37.395660Z INFO Daemon Daemon Provisioning complete Sep 11 18:07:37.407732 waagent[2622]: 2026-09-11T18:07:37.407693Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Sep 11 18:07:37.408114 waagent[2622]: 2026-09-11T18:07:37.407952Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Sep 11 18:07:37.408114 waagent[2622]: 2026-09-11T18:07:37.408156Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.12.0.4 is the most current agent Sep 11 18:07:37.512172 waagent[2717]: 2026-09-11T18:07:37.512110Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.4) Sep 11 18:07:37.512469 waagent[2717]: 2026-09-11T18:07:37.512204Z INFO ExtHandler ExtHandler OS: flatcar 4790.1.0 Sep 11 18:07:37.512469 waagent[2717]: 2026-09-11T18:07:37.512249Z INFO ExtHandler ExtHandler Python: 3.12.13 Sep 11 18:07:37.512469 waagent[2717]: 2026-09-11T18:07:37.512284Z INFO ExtHandler ExtHandler CPU Arch: x86_64 Sep 11 18:07:37.549821 waagent[2717]: 2026-09-11T18:07:37.549773Z INFO ExtHandler ExtHandler Distro: flatcar-4790.1.0; OSUtil: FlatcarUtil; AgentService: waagent; Python: 3.12.13; Arch: x86_64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.22.0; Sep 11 18:07:37.549946 waagent[2717]: 2026-09-11T18:07:37.549923Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 11 18:07:37.549999 waagent[2717]: 2026-09-11T18:07:37.549982Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 11 18:07:37.555257 waagent[2717]: 2026-09-11T18:07:37.555217Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Sep 11 18:07:37.567321 waagent[2717]: 2026-09-11T18:07:37.567297Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.185 Sep 11 18:07:37.567619 waagent[2717]: 2026-09-11T18:07:37.567595Z INFO ExtHandler Sep 11 18:07:37.567667 waagent[2717]: 2026-09-11T18:07:37.567652Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: b92bb546-aab3-427b-be85-af2f9cc25dd7 eTag: 8221617458928542965 source: Fabric] Sep 11 18:07:37.567846 waagent[2717]: 2026-09-11T18:07:37.567824Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Sep 11 18:07:37.568198 waagent[2717]: 2026-09-11T18:07:37.568175Z INFO ExtHandler Sep 11 18:07:37.568244 waagent[2717]: 2026-09-11T18:07:37.568225Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Sep 11 18:07:37.570362 waagent[2717]: 2026-09-11T18:07:37.570341Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Sep 11 18:07:37.642983 waagent[2717]: 2026-09-11T18:07:37.642938Z INFO ExtHandler Downloaded certificate {'thumbprint': '39079CA58D98713702F7BCCD9BC62057476B6B9C', 'hasPrivateKey': True} Sep 11 18:07:37.643300 waagent[2717]: 2026-09-11T18:07:37.643270Z INFO ExtHandler Fetch goal state completed Sep 11 18:07:37.659972 waagent[2717]: 2026-09-11T18:07:37.659902Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026) Sep 11 18:07:37.662677 waagent[2717]: 2026-09-11T18:07:37.662637Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.4 running as process 2717 Sep 11 18:07:37.662770 waagent[2717]: 2026-09-11T18:07:37.662749Z INFO ExtHandler ExtHandler ******** AutoUpdate.Enabled is set to False, not processing the operation ******** Sep 11 18:07:37.662995 waagent[2717]: 2026-09-11T18:07:37.662975Z INFO ExtHandler ExtHandler ******** AutoUpdate.UpdateToLatestVersion is set to False, not processing the operation ******** Sep 11 18:07:37.663904 waagent[2717]: 2026-09-11T18:07:37.663871Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '4790.1.0', '', 'Flatcar Container Linux by Kinvolk'] Sep 11 18:07:37.664197 waagent[2717]: 2026-09-11T18:07:37.664172Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '4790.1.0', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported Sep 11 18:07:37.664294 waagent[2717]: 2026-09-11T18:07:37.664274Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Sep 11 18:07:37.664648 waagent[2717]: 2026-09-11T18:07:37.664627Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Sep 11 18:07:37.698860 waagent[2717]: 2026-09-11T18:07:37.698832Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Sep 11 18:07:37.698999 waagent[2717]: 2026-09-11T18:07:37.698975Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Sep 11 18:07:37.703827 waagent[2717]: 2026-09-11T18:07:37.703476Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Sep 11 18:07:37.708407 systemd[1]: Reload requested from client PID 2732 ('systemctl') (unit waagent.service)... Sep 11 18:07:37.708425 systemd[1]: Reloading... Sep 11 18:07:37.778028 zram_generator::config[2780]: No configuration found. Sep 11 18:07:37.990066 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#270 cmd 0x4a status: scsi 0x0 srb 0x20 hv 0xc0000001 Sep 11 18:07:37.992543 systemd[1]: Reloading finished in 283 ms. Sep 11 18:07:38.011023 waagent[2717]: 2026-09-11T18:07:38.010205Z INFO ExtHandler ExtHandler Successfully added and enabled the waagent-network-setup.service Sep 11 18:07:38.011023 waagent[2717]: 2026-09-11T18:07:38.010330Z INFO ExtHandler ExtHandler Persistent firewall rules setup successfully Sep 11 18:07:38.317243 waagent[2717]: 2026-09-11T18:07:38.317149Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Sep 11 18:07:38.317459 waagent[2717]: 2026-09-11T18:07:38.317431Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Sep 11 18:07:38.318061 waagent[2717]: 2026-09-11T18:07:38.317990Z INFO ExtHandler ExtHandler Starting env monitor service. Sep 11 18:07:38.318375 waagent[2717]: 2026-09-11T18:07:38.318322Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Sep 11 18:07:38.318452 waagent[2717]: 2026-09-11T18:07:38.318421Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 11 18:07:38.318586 waagent[2717]: 2026-09-11T18:07:38.318564Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 11 18:07:38.318741 waagent[2717]: 2026-09-11T18:07:38.318716Z INFO EnvHandler ExtHandler Configure routes Sep 11 18:07:38.318810 waagent[2717]: 2026-09-11T18:07:38.318791Z INFO EnvHandler ExtHandler Gateway:None Sep 11 18:07:38.318992 waagent[2717]: 2026-09-11T18:07:38.318936Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Sep 11 18:07:38.319037 waagent[2717]: 2026-09-11T18:07:38.318998Z INFO EnvHandler ExtHandler Routes:None Sep 11 18:07:38.319260 waagent[2717]: 2026-09-11T18:07:38.319238Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Sep 11 18:07:38.319506 waagent[2717]: 2026-09-11T18:07:38.319480Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Sep 11 18:07:38.319733 waagent[2717]: 2026-09-11T18:07:38.319710Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Sep 11 18:07:38.320123 waagent[2717]: 2026-09-11T18:07:38.320097Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Sep 11 18:07:38.320400 waagent[2717]: 2026-09-11T18:07:38.320347Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Sep 11 18:07:38.320664 waagent[2717]: 2026-09-11T18:07:38.320641Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Sep 11 18:07:38.320758 waagent[2717]: 2026-09-11T18:07:38.320737Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Sep 11 18:07:38.323171 waagent[2717]: 2026-09-11T18:07:38.323136Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Sep 11 18:07:38.323171 waagent[2717]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Sep 11 18:07:38.323171 waagent[2717]: eth0 00000000 0100000A 0003 0 0 1024 00000000 0 0 0 Sep 11 18:07:38.323171 waagent[2717]: eth0 0000000A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Sep 11 18:07:38.323171 waagent[2717]: eth0 0100000A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Sep 11 18:07:38.323171 waagent[2717]: eth0 10813FA8 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 11 18:07:38.323171 waagent[2717]: eth0 FEA9FEA9 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Sep 11 18:07:38.330429 waagent[2717]: 2026-09-11T18:07:38.330118Z INFO ExtHandler ExtHandler Sep 11 18:07:38.330429 waagent[2717]: 2026-09-11T18:07:38.330182Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 5a3dc02f-5378-4d94-a924-c932c66fdb20 correlation 68cad88a-379d-4e6a-b595-580fa614e500 created: 2026-09-11T18:06:37.462898Z] Sep 11 18:07:38.330808 waagent[2717]: 2026-09-11T18:07:38.330782Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Sep 11 18:07:38.331711 waagent[2717]: 2026-09-11T18:07:38.331681Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 1 ms] Sep 11 18:07:38.370069 waagent[2717]: 2026-09-11T18:07:38.370020Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 7CF083FE-3098-4C17-A5B4-D5546D56E3BC;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 0;UpdateMode: SelfUpdate;] Sep 11 18:07:38.393940 waagent[2717]: 2026-09-11T18:07:38.393894Z INFO MonitorHandler ExtHandler Network interfaces: Sep 11 18:07:38.393940 waagent[2717]: Executing ['ip', '-a', '-o', 'link']: Sep 11 18:07:38.393940 waagent[2717]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Sep 11 18:07:38.393940 waagent[2717]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:a3:d8:7f brd ff:ff:ff:ff:ff:ff\ alias Network Device\ altname enx002248a3d87f Sep 11 18:07:38.393940 waagent[2717]: 3: enP30832s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:a3:d8:7f brd ff:ff:ff:ff:ff:ff\ altname enP30832p0s0\ altname enp0s0\ altname ens1 Sep 11 18:07:38.393940 waagent[2717]: Executing ['ip', '-4', '-a', '-o', 'address']: Sep 11 18:07:38.393940 waagent[2717]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Sep 11 18:07:38.393940 waagent[2717]: 2: eth0 inet 10.0.0.33/24 metric 1024 brd 10.0.0.255 scope global eth0\ valid_lft forever preferred_lft forever Sep 11 18:07:38.393940 waagent[2717]: Executing ['ip', '-6', '-a', '-o', 'address']: Sep 11 18:07:38.393940 waagent[2717]: 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever Sep 11 18:07:38.393940 waagent[2717]: 2: eth0 inet6 fe80::222:48ff:fea3:d87f/64 scope link proto kernel_ll \ valid_lft forever preferred_lft forever Sep 11 18:07:38.429652 waagent[2717]: 2026-09-11T18:07:38.429605Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: Sep 11 18:07:38.429652 waagent[2717]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 11 18:07:38.429652 waagent[2717]: pkts bytes target prot opt in out source destination Sep 11 18:07:38.429652 waagent[2717]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 11 18:07:38.429652 waagent[2717]: pkts bytes target prot opt in out source destination Sep 11 18:07:38.429652 waagent[2717]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 11 18:07:38.429652 waagent[2717]: pkts bytes target prot opt in out source destination Sep 11 18:07:38.429652 waagent[2717]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 11 18:07:38.429652 waagent[2717]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 11 18:07:38.429652 waagent[2717]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 11 18:07:38.432203 waagent[2717]: 2026-09-11T18:07:38.432160Z INFO EnvHandler ExtHandler Current Firewall rules: Sep 11 18:07:38.432203 waagent[2717]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Sep 11 18:07:38.432203 waagent[2717]: pkts bytes target prot opt in out source destination Sep 11 18:07:38.432203 waagent[2717]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Sep 11 18:07:38.432203 waagent[2717]: pkts bytes target prot opt in out source destination Sep 11 18:07:38.432203 waagent[2717]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Sep 11 18:07:38.432203 waagent[2717]: pkts bytes target prot opt in out source destination Sep 11 18:07:38.432203 waagent[2717]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Sep 11 18:07:38.432203 waagent[2717]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Sep 11 18:07:38.432203 waagent[2717]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Sep 11 18:07:53.388947 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. Sep 11 18:07:53.390283 systemd[1]: Started sshd@0-1-10.0.0.33:22-20.61.25.254:56910.service - OpenSSH per-connection server daemon (20.61.25.254:56910). Sep 11 18:07:53.688476 sshd[2872]: Accepted publickey for core from 20.61.25.254 port 56910 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:53.689504 sshd-session[2872]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:53.700925 systemd[1]: Starting user@500.service - User Manager for UID 500... Sep 11 18:07:53.704193 systemd-logind[2508]: New session '3' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:53.709672 (systemd)[2876]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:53.711655 systemd-logind[2508]: New session '4' of user 'core' with class 'manager-early' and type 'unspecified'. Sep 11 18:07:53.900351 systemd[2876]: Queued start job for default target default.target. Sep 11 18:07:53.909653 systemd[2876]: Created slice app.slice - User Application Slice. Sep 11 18:07:53.909687 systemd[2876]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Sep 11 18:07:53.909701 systemd[2876]: Reached target machines.target - Virtual Machines and Containers. Sep 11 18:07:53.909736 systemd[2876]: Reached target paths.target - Paths. Sep 11 18:07:53.909756 systemd[2876]: Reached target timers.target - Timers. Sep 11 18:07:53.910536 systemd[2876]: Starting dbus.socket - D-Bus User Message Bus Socket... Sep 11 18:07:53.911961 systemd[2876]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Sep 11 18:07:53.912108 systemd[2876]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Sep 11 18:07:53.912976 systemd[2876]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Sep 11 18:07:53.913202 systemd[2876]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Sep 11 18:07:53.914126 systemd[2876]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... Sep 11 18:07:53.920092 systemd[2876]: Listening on dbus.socket - D-Bus User Message Bus Socket. Sep 11 18:07:53.920921 systemd[2876]: Reached target sockets.target - Sockets. Sep 11 18:07:53.923637 systemd[2876]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. Sep 11 18:07:53.923803 systemd[2876]: Reached target basic.target - Basic System. Sep 11 18:07:53.923888 systemd[2876]: Reached target default.target - Main User Target. Sep 11 18:07:53.923960 systemd[2876]: Startup finished in 208ms. Sep 11 18:07:53.924034 systemd[1]: Started user@500.service - User Manager for UID 500. Sep 11 18:07:53.925114 systemd[1]: Started session-3.scope - Session 3 of User core. Sep 11 18:07:53.982020 systemd[1]: Started sshd@1-4097-10.0.0.33:22-20.61.25.254:56926.service - OpenSSH per-connection server daemon (20.61.25.254:56926). Sep 11 18:07:54.086679 sshd[2890]: Accepted publickey for core from 20.61.25.254 port 56926 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:54.087797 sshd-session[2890]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:54.092077 systemd-logind[2508]: New session '5' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:54.106141 systemd[1]: Started session-5.scope - Session 5 of User core. Sep 11 18:07:54.141188 sshd[2894]: Connection closed by 20.61.25.254 port 56926 Sep 11 18:07:54.142124 sshd-session[2890]: pam_unix(sshd:session): session closed for user core Sep 11 18:07:54.143957 systemd[1]: sshd@1-4097-10.0.0.33:22-20.61.25.254:56926.service: Deactivated successfully. Sep 11 18:07:54.145303 systemd[1]: session-5.scope: Deactivated successfully. Sep 11 18:07:54.145884 systemd-logind[2508]: Session 5 logged out. Waiting for processes to exit. Sep 11 18:07:54.146798 systemd-logind[2508]: Removed session 5. Sep 11 18:07:54.168826 systemd[1]: Started sshd@2-4098-10.0.0.33:22-20.61.25.254:56930.service - OpenSSH per-connection server daemon (20.61.25.254:56930). Sep 11 18:07:54.269564 sshd[2900]: Accepted publickey for core from 20.61.25.254 port 56930 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:54.270023 sshd-session[2900]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:54.273938 systemd-logind[2508]: New session '6' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:54.280161 systemd[1]: Started session-6.scope - Session 6 of User core. Sep 11 18:07:54.313228 sshd[2904]: Connection closed by 20.61.25.254 port 56930 Sep 11 18:07:54.314272 sshd-session[2900]: pam_unix(sshd:session): session closed for user core Sep 11 18:07:54.315880 systemd[1]: sshd@2-4098-10.0.0.33:22-20.61.25.254:56930.service: Deactivated successfully. Sep 11 18:07:54.316992 systemd[1]: session-6.scope: Deactivated successfully. Sep 11 18:07:54.317976 systemd-logind[2508]: Session 6 logged out. Waiting for processes to exit. Sep 11 18:07:54.318886 systemd-logind[2508]: Removed session 6. Sep 11 18:07:54.340861 systemd[1]: Started sshd@3-2-10.0.0.33:22-20.61.25.254:56938.service - OpenSSH per-connection server daemon (20.61.25.254:56938). Sep 11 18:07:54.440406 sshd[2910]: Accepted publickey for core from 20.61.25.254 port 56938 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:54.441215 sshd-session[2910]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:54.445061 systemd-logind[2508]: New session '7' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:54.454141 systemd[1]: Started session-7.scope - Session 7 of User core. Sep 11 18:07:54.488894 sshd[2914]: Connection closed by 20.61.25.254 port 56938 Sep 11 18:07:54.489240 sshd-session[2910]: pam_unix(sshd:session): session closed for user core Sep 11 18:07:54.491123 systemd[1]: sshd@3-2-10.0.0.33:22-20.61.25.254:56938.service: Deactivated successfully. Sep 11 18:07:54.492218 systemd[1]: session-7.scope: Deactivated successfully. Sep 11 18:07:54.492810 systemd-logind[2508]: Session 7 logged out. Waiting for processes to exit. Sep 11 18:07:54.493715 systemd-logind[2508]: Removed session 7. Sep 11 18:07:54.512827 systemd[1]: Started sshd@4-4099-10.0.0.33:22-20.61.25.254:56942.service - OpenSSH per-connection server daemon (20.61.25.254:56942). Sep 11 18:07:54.616182 sshd[2920]: Accepted publickey for core from 20.61.25.254 port 56942 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:54.616949 sshd-session[2920]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:54.620483 systemd-logind[2508]: New session '8' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:54.626134 systemd[1]: Started session-8.scope - Session 8 of User core. Sep 11 18:07:54.784746 sudo[2925]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Sep 11 18:07:54.784947 sudo[2925]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:07:54.795666 sudo[2925]: pam_unix(sudo:session): session closed for user root Sep 11 18:07:54.810348 sshd[2924]: Connection closed by 20.61.25.254 port 56942 Sep 11 18:07:54.811165 sshd-session[2920]: pam_unix(sshd:session): session closed for user core Sep 11 18:07:54.813095 systemd[1]: sshd@4-4099-10.0.0.33:22-20.61.25.254:56942.service: Deactivated successfully. Sep 11 18:07:54.814305 systemd[1]: session-8.scope: Deactivated successfully. Sep 11 18:07:54.814923 systemd-logind[2508]: Session 8 logged out. Waiting for processes to exit. Sep 11 18:07:54.815893 systemd-logind[2508]: Removed session 8. Sep 11 18:07:54.836784 systemd[1]: Started sshd@5-3-10.0.0.33:22-20.61.25.254:56948.service - OpenSSH per-connection server daemon (20.61.25.254:56948). Sep 11 18:07:54.940465 sshd[2933]: Accepted publickey for core from 20.61.25.254 port 56948 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:54.941309 sshd-session[2933]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:54.944853 systemd-logind[2508]: New session '9' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:54.953113 systemd[1]: Started session-9.scope - Session 9 of User core. Sep 11 18:07:54.975161 sudo[2939]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Sep 11 18:07:54.975357 sudo[2939]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:07:54.976435 sudo[2939]: pam_unix(sudo:session): session closed for user root Sep 11 18:07:54.980420 sudo[2938]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules Sep 11 18:07:54.980609 sudo[2938]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:07:54.985162 systemd[1]: Starting audit-rules.service - Load Audit Rules... Sep 11 18:07:55.024000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 11 18:07:55.032111 augenrules[2963]: No rules Sep 11 18:07:55.033413 systemd[1]: audit-rules.service: Deactivated successfully. Sep 11 18:07:55.033613 systemd[1]: Finished audit-rules.service - Load Audit Rules. Sep 11 18:07:55.033846 kernel: kauditd_printk_skb: 4 callbacks suppressed Sep 11 18:07:55.033879 kernel: audit: type=1305 audit(1789150075.024:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Sep 11 18:07:55.024000 audit[2963]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcf665a080 a2=420 a3=0 items=0 ppid=2944 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:07:55.034512 sudo[2938]: pam_unix(sudo:session): session closed for user root Sep 11 18:07:55.038518 kernel: audit: type=1300 audit(1789150075.024:169): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcf665a080 a2=420 a3=0 items=0 ppid=2944 pid=2963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:07:55.024000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 11 18:07:55.038562 kernel: audit: type=1327 audit(1789150075.024:169): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Sep 11 18:07:55.033000 audit[2938]: AUDIT1106 pid=2938 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.043021 kernel: audit: type=1106 audit(1789150075.033:170): pid=2938 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.033000 audit[2938]: AUDIT1104 pid=2938 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.045649 kernel: audit: type=1104 audit(1789150075.033:171): pid=2938 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.048178 kernel: audit: type=1130 audit(1789150075.034:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.034000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.050709 kernel: audit: type=1131 audit(1789150075.034:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.052021 sshd[2937]: Connection closed by 20.61.25.254 port 56948 Sep 11 18:07:55.052404 sshd-session[2933]: pam_unix(sshd:session): session closed for user core Sep 11 18:07:55.051000 audit[2933]: AUDIT1106 pid=2933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.054744 systemd[1]: sshd@5-3-10.0.0.33:22-20.61.25.254:56948.service: Deactivated successfully. Sep 11 18:07:55.056318 systemd[1]: session-9.scope: Deactivated successfully. Sep 11 18:07:55.052000 audit[2933]: AUDIT1104 pid=2933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.059106 systemd-logind[2508]: Session 9 logged out. Waiting for processes to exit. Sep 11 18:07:55.059790 systemd-logind[2508]: Removed session 9. Sep 11 18:07:55.061957 kernel: audit: type=1106 audit(1789150075.051:174): pid=2933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.061994 kernel: audit: type=1104 audit(1789150075.052:175): pid=2933 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-3-10.0.0.33:22-20.61.25.254:56948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.065763 kernel: audit: type=1131 audit(1789150075.053:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-3-10.0.0.33:22-20.61.25.254:56948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-10.0.0.33:22-20.61.25.254:56964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:07:55.076761 systemd[1]: Started sshd@6-4-10.0.0.33:22-20.61.25.254:56964.service - OpenSSH per-connection server daemon (20.61.25.254:56964). Sep 11 18:07:55.175000 audit[2972]: AUDIT1101 pid=2972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.176961 sshd[2972]: Accepted publickey for core from 20.61.25.254 port 56964 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:07:55.176000 audit[2972]: AUDIT1103 pid=2972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.176000 audit[2972]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe6598b800 a2=3 a3=0 items=0 ppid=1 pid=2972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:07:55.176000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:07:55.177768 sshd-session[2972]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:07:55.181519 systemd-logind[2508]: New session '10' of user 'core' with class 'user' and type 'tty'. Sep 11 18:07:55.190162 systemd[1]: Started session-10.scope - Session 10 of User core. Sep 11 18:07:55.191000 audit[2972]: AUDIT1105 pid=2972 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.192000 audit[2976]: AUDIT1103 pid=2976 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:07:55.619653 chronyd[2493]: Selected source PHC0 Sep 11 18:07:59.345235 systemd[1]: Starting docker.service - Docker Application Container Engine... Sep 11 18:07:59.358083 (dockerd)[2991]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU Sep 11 18:08:03.237063 dockerd[2991]: time="2026-09-11T18:08:03.236982090Z" level=info msg="Starting up" Sep 11 18:08:03.239704 dockerd[2991]: time="2026-09-11T18:08:03.239501437Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" Sep 11 18:08:03.239896 dockerd[2991]: time="2026-09-11T18:08:03.239872274Z" level=info msg="CDI directory does not exist, skipping: failed to monitor for changes: no such file or directory" dir=/etc/cdi Sep 11 18:08:03.239896 dockerd[2991]: time="2026-09-11T18:08:03.239893305Z" level=info msg="CDI directory does not exist, skipping: failed to monitor for changes: no such file or directory" dir=/var/run/cdi Sep 11 18:08:03.250110 dockerd[2991]: time="2026-09-11T18:08:03.250054800Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s Sep 11 18:08:03.269732 dockerd[2991]: time="2026-09-11T18:08:03.269693680Z" level=info msg="Loading containers: start." Sep 11 18:08:03.270067 dockerd[2991]: time="2026-09-11T18:08:03.269739704Z" level=info msg="Starting daemon with containerd snapshotter integration enabled" Sep 11 18:08:03.284460 dockerd[2991]: time="2026-09-11T18:08:03.284430535Z" level=info msg="Restoring containers: start." Sep 11 18:08:03.332309 dockerd[2991]: time="2026-09-11T18:08:03.332276222Z" level=info msg="Deleting nftables IPv4 rules" error="exit status 1" Sep 11 18:08:03.343304 dockerd[2991]: time="2026-09-11T18:08:03.343278975Z" level=info msg="Deleting nftables IPv6 rules" error="exit status 1" Sep 11 18:08:03.366000 audit[3041]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=3041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.368871 kernel: kauditd_printk_skb: 8 callbacks suppressed Sep 11 18:08:03.368927 kernel: audit: type=1325 audit(1789150083.366:183): table=nat:5 family=2 entries=2 op=nft_register_chain pid=3041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.366000 audit[3041]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe88a57bc0 a2=0 a3=0 items=0 ppid=2991 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.377461 kernel: audit: type=1300 audit(1789150083.366:183): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe88a57bc0 a2=0 a3=0 items=0 ppid=2991 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.366000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 11 18:08:03.380818 kernel: audit: type=1327 audit(1789150083.366:183): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 11 18:08:03.369000 audit[3043]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.383433 kernel: audit: type=1325 audit(1789150083.369:184): table=filter:6 family=2 entries=2 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.369000 audit[3043]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe89b9bd20 a2=0 a3=0 items=0 ppid=2991 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.387498 kernel: audit: type=1300 audit(1789150083.369:184): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe89b9bd20 a2=0 a3=0 items=0 ppid=2991 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.369000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 11 18:08:03.390851 kernel: audit: type=1327 audit(1789150083.369:184): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 11 18:08:03.371000 audit[3045]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.392966 kernel: audit: type=1325 audit(1789150083.371:185): table=filter:7 family=2 entries=1 op=nft_register_chain pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.371000 audit[3045]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc20629f80 a2=0 a3=0 items=0 ppid=2991 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.397875 kernel: audit: type=1300 audit(1789150083.371:185): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc20629f80 a2=0 a3=0 items=0 ppid=2991 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.371000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Sep 11 18:08:03.401429 kernel: audit: type=1327 audit(1789150083.371:185): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Sep 11 18:08:03.372000 audit[3047]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=3047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.404311 kernel: audit: type=1325 audit(1789150083.372:186): table=filter:8 family=2 entries=1 op=nft_register_chain pid=3047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.372000 audit[3047]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1dd52970 a2=0 a3=0 items=0 ppid=2991 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.372000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Sep 11 18:08:03.374000 audit[3049]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.374000 audit[3049]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffe57efba0 a2=0 a3=0 items=0 ppid=2991 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.374000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Sep 11 18:08:03.376000 audit[3051]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=3051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.376000 audit[3051]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff3ee5a170 a2=0 a3=0 items=0 ppid=2991 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.376000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D494E5445524E414C Sep 11 18:08:03.378000 audit[3053]: NETFILTER_CFG table=nat:11 family=2 entries=2 op=nft_register_chain pid=3053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.378000 audit[3053]: SYSCALL arch=c000003e syscall=46 success=yes exit=384 a0=3 a1=7ffd33d76820 a2=0 a3=0 items=0 ppid=2991 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.378000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 11 18:08:03.428000 audit[3056]: NETFILTER_CFG table=nat:12 family=2 entries=2 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.428000 audit[3056]: SYSCALL arch=c000003e syscall=46 success=yes exit=472 a0=3 a1=7ffff4323610 a2=0 a3=0 items=0 ppid=2991 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.428000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Sep 11 18:08:03.429000 audit[3058]: NETFILTER_CFG table=filter:13 family=2 entries=2 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.429000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffd5b56f6e0 a2=0 a3=0 items=0 ppid=2991 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.429000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Sep 11 18:08:03.431000 audit[3060]: NETFILTER_CFG table=filter:14 family=2 entries=1 op=nft_register_rule pid=3060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.431000 audit[3060]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7ffd69e67f00 a2=0 a3=0 items=0 ppid=2991 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.431000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Sep 11 18:08:03.432000 audit[3062]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.432000 audit[3062]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7ffff7b09c90 a2=0 a3=0 items=0 ppid=2991 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.432000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D464F5257415244002D6A00444F434B45522D494E5445524E414C Sep 11 18:08:03.434000 audit[3064]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.434000 audit[3064]: SYSCALL arch=c000003e syscall=46 success=yes exit=232 a0=3 a1=7ffcf9055a00 a2=0 a3=0 items=0 ppid=2991 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.434000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Sep 11 18:08:03.489000 audit[3096]: NETFILTER_CFG table=nat:17 family=10 entries=2 op=nft_register_chain pid=3096 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.489000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcd7d59ad0 a2=0 a3=0 items=0 ppid=2991 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.489000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Sep 11 18:08:03.491000 audit[3098]: NETFILTER_CFG table=filter:18 family=10 entries=2 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.491000 audit[3098]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcd85e6d50 a2=0 a3=0 items=0 ppid=2991 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.491000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Sep 11 18:08:03.492000 audit[3100]: NETFILTER_CFG table=filter:19 family=10 entries=1 op=nft_register_chain pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.492000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd838dfe0 a2=0 a3=0 items=0 ppid=2991 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.492000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Sep 11 18:08:03.494000 audit[3102]: NETFILTER_CFG table=filter:20 family=10 entries=1 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.494000 audit[3102]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd340326f0 a2=0 a3=0 items=0 ppid=2991 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.494000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Sep 11 18:08:03.495000 audit[3104]: NETFILTER_CFG table=filter:21 family=10 entries=1 op=nft_register_chain pid=3104 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.495000 audit[3104]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff8b91ff20 a2=0 a3=0 items=0 ppid=2991 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.495000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Sep 11 18:08:03.497000 audit[3106]: NETFILTER_CFG table=filter:22 family=10 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.497000 audit[3106]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd473452c0 a2=0 a3=0 items=0 ppid=2991 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.497000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D494E5445524E414C Sep 11 18:08:03.498000 audit[3108]: NETFILTER_CFG table=nat:23 family=10 entries=2 op=nft_register_chain pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.498000 audit[3108]: SYSCALL arch=c000003e syscall=46 success=yes exit=384 a0=3 a1=7fff1414ad00 a2=0 a3=0 items=0 ppid=2991 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.498000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Sep 11 18:08:03.500000 audit[3110]: NETFILTER_CFG table=nat:24 family=10 entries=2 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.500000 audit[3110]: SYSCALL arch=c000003e syscall=46 success=yes exit=484 a0=3 a1=7fff3825cf50 a2=0 a3=0 items=0 ppid=2991 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.500000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003A3A312F313238 Sep 11 18:08:03.502000 audit[3112]: NETFILTER_CFG table=filter:25 family=10 entries=2 op=nft_register_chain pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.502000 audit[3112]: SYSCALL arch=c000003e syscall=46 success=yes exit=340 a0=3 a1=7ffd46d7eb80 a2=0 a3=0 items=0 ppid=2991 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.502000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Sep 11 18:08:03.503000 audit[3114]: NETFILTER_CFG table=filter:26 family=10 entries=1 op=nft_register_rule pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.503000 audit[3114]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7fff11a7e630 a2=0 a3=0 items=0 ppid=2991 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Sep 11 18:08:03.505000 audit[3116]: NETFILTER_CFG table=filter:27 family=10 entries=1 op=nft_register_rule pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.505000 audit[3116]: SYSCALL arch=c000003e syscall=46 success=yes exit=236 a0=3 a1=7ffc967c08d0 a2=0 a3=0 items=0 ppid=2991 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.505000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D464F5257415244002D6A00444F434B45522D494E5445524E414C Sep 11 18:08:03.506000 audit[3118]: NETFILTER_CFG table=filter:28 family=10 entries=1 op=nft_register_rule pid=3118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.506000 audit[3118]: SYSCALL arch=c000003e syscall=46 success=yes exit=232 a0=3 a1=7ffeb0011e50 a2=0 a3=0 items=0 ppid=2991 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.506000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Sep 11 18:08:03.517025 kernel: Initializing XFRM netlink socket Sep 11 18:08:03.517000 audit[3124]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_chain pid=3124 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.517000 audit[3124]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff28dddff0 a2=0 a3=0 items=0 ppid=2991 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.517000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 11 18:08:03.519000 audit[3126]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=3126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.519000 audit[3126]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffded909670 a2=0 a3=0 items=0 ppid=2991 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.519000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 11 18:08:03.520000 audit[3128]: NETFILTER_CFG table=filter:31 family=10 entries=1 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.520000 audit[3128]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc6e3f2020 a2=0 a3=0 items=0 ppid=2991 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.520000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Sep 11 18:08:03.522000 audit[3130]: NETFILTER_CFG table=filter:32 family=10 entries=1 op=nft_register_rule pid=3130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Sep 11 18:08:03.522000 audit[3130]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff02ec0380 a2=0 a3=0 items=0 ppid=2991 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4900464F5257415244002D6A00444F434B45522D55534552 Sep 11 18:08:03.583000 audit[3135]: NETFILTER_CFG table=nat:33 family=2 entries=2 op=nft_register_chain pid=3135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.583000 audit[3135]: SYSCALL arch=c000003e syscall=46 success=yes exit=520 a0=3 a1=7fffad51d5a0 a2=0 a3=0 items=0 ppid=2991 pid=3135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Sep 11 18:08:03.590000 audit[3143]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=3143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.590000 audit[3143]: SYSCALL arch=c000003e syscall=46 success=yes exit=300 a0=3 a1=7fff60547b80 a2=0 a3=0 items=0 ppid=2991 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.590000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 Sep 11 18:08:03.594000 audit[3148]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.594000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff911c0af0 a2=0 a3=0 items=0 ppid=2991 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.594000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D6A0044524F50 Sep 11 18:08:03.595000 audit[3150]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.595000 audit[3150]: SYSCALL arch=c000003e syscall=46 success=yes exit=512 a0=3 a1=7ffe9a77e530 a2=0 a3=0 items=0 ppid=2991 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.595000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D4354002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Sep 11 18:08:03.597000 audit[3152]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=3152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:03.597000 audit[3152]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff755dc7e0 a2=0 a3=0 items=0 ppid=2991 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:03.597000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D425249444745002D6F00646F636B657230002D6A00444F434B4552 Sep 11 18:08:03.598841 systemd-networkd[2304]: docker0: Link UP Sep 11 18:08:03.618455 dockerd[2991]: time="2026-09-11T18:08:03.618431802Z" level=info msg="Loading containers: done." Sep 11 18:08:03.745261 dockerd[2991]: time="2026-09-11T18:08:03.744840374Z" level=info msg="Docker daemon" commit=fbf3ed25f893e6ce21336f1101590e40a13934f4 containerd-snapshotter=true storage-driver=overlayfs version=29.1.3 Sep 11 18:08:03.745261 dockerd[2991]: time="2026-09-11T18:08:03.744979174Z" level=info msg="Initializing buildkit" Sep 11 18:08:03.878065 dockerd[2991]: time="2026-09-11T18:08:03.877996457Z" level=info msg="Completed buildkit initialization" Sep 11 18:08:03.880955 dockerd[2991]: time="2026-09-11T18:08:03.880922169Z" level=info msg="Daemon has completed initialization" Sep 11 18:08:03.881467 dockerd[2991]: time="2026-09-11T18:08:03.881030244Z" level=info msg="API listen on /run/docker.sock" Sep 11 18:08:03.881558 systemd[1]: Started docker.service - Docker Application Container Engine. Sep 11 18:08:03.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:03.906158 sshd[2976]: Connection closed by 20.61.25.254 port 56964 Sep 11 18:08:03.907477 sshd-session[2972]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:03.906000 audit[2972]: AUDIT1106 pid=2972 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:03.906000 audit[2972]: AUDIT1104 pid=2972 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:03.909573 systemd[1]: sshd@6-4-10.0.0.33:22-20.61.25.254:56964.service: Deactivated successfully. Sep 11 18:08:03.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-10.0.0.33:22-20.61.25.254:56964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:03.910875 systemd[1]: session-10.scope: Deactivated successfully. Sep 11 18:08:03.911107 systemd[1]: session-10.scope: Consumed 68ms CPU time over 8.720s wall clock time, 108.6M memory peak. Sep 11 18:08:03.912022 systemd-logind[2508]: Session 10 logged out. Waiting for processes to exit. Sep 11 18:08:03.912885 systemd-logind[2508]: Removed session 10. Sep 11 18:08:03.936199 systemd[1]: Started sshd@7-5-10.0.0.33:22-20.61.25.254:41794.service - OpenSSH per-connection server daemon (20.61.25.254:41794). Sep 11 18:08:03.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-10.0.0.33:22-20.61.25.254:41794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.041000 audit[3170]: AUDIT1101 pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:04.043096 sshd[3170]: Accepted publickey for core from 20.61.25.254 port 41794 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:04.042000 audit[3170]: AUDIT1103 pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:04.043000 audit[3170]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffd6e73fc0 a2=3 a3=0 items=0 ppid=1 pid=3170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:04.043000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:04.044343 sshd-session[3170]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:04.047991 systemd-logind[2508]: New session '11' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:04.055148 systemd[1]: Started session-11.scope - Session 11 of User core. Sep 11 18:08:04.055000 audit[3170]: AUDIT1105 pid=3170 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:04.057000 audit[3174]: AUDIT1103 pid=3174 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:04.093000 audit[3179]: AUDIT1101 pid=3179 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.095186 sudo[3179]: core : PWD=/tmp/tmp.Ldwx8pUr4o ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/sleep Sep 11 18:08:04.094000 audit[3179]: AUDIT1110 pid=3179 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.095564 sudo[3179]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:08:04.094000 audit[3179]: AUDIT1105 pid=3179 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.122753 sudo[3179]: pam_unix(sudo:session): session closed for user root Sep 11 18:08:04.121000 audit[3179]: AUDIT1106 pid=3179 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.121000 audit[3179]: AUDIT1104 pid=3179 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.126000 audit[3188]: AUDIT1101 pid=3188 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.127559 sudo[3188]: core : PWD=/tmp/tmp.Ldwx8pUr4o ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/sleep /lib64/ld-linux-x86-64.so.2 /lib64/libc.so.6 ./ Sep 11 18:08:04.127761 sudo[3188]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:08:04.126000 audit[3188]: AUDIT1110 pid=3188 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.126000 audit[3188]: AUDIT1105 pid=3188 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.212405 sudo[3188]: pam_unix(sudo:session): session closed for user root Sep 11 18:08:04.211000 audit[3188]: AUDIT1106 pid=3188 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.211000 audit[3188]: AUDIT1104 pid=3188 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.215000 audit[3175]: AUDIT1101 pid=3175 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.216565 sudo[3175]: core : PWD=/tmp/tmp.Ldwx8pUr4o ; USER=root ; COMMAND=/usr/sbin/docker build -t sleep . Sep 11 18:08:04.215000 audit[3175]: AUDIT1110 pid=3175 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.215000 audit[3175]: AUDIT1105 pid=3175 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:04.216764 sudo[3175]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:08:04.419255 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount3758267567.mount: Deactivated successfully. Sep 11 18:08:04.570312 dockerd[2991]: time="2026-09-11T18:08:04.570275649Z" level=warning msg="forcibly turning on oci-mediatype mode for attestations" span="exporting to image" spanID=b0c3c875b480bf62 traceID=75ea10d9b4d668fc7f7fcca5ea83f204 Sep 11 18:08:05.224563 sudo[3175]: pam_unix(sudo:session): session closed for user root Sep 11 18:08:05.223000 audit[3175]: AUDIT1106 pid=3175 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.223000 audit[3175]: AUDIT1104 pid=3175 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.239086 sshd[3174]: Connection closed by 20.61.25.254 port 41794 Sep 11 18:08:05.240465 sshd-session[3170]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:05.239000 audit[3170]: AUDIT1106 pid=3170 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.239000 audit[3170]: AUDIT1104 pid=3170 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.242672 systemd[1]: sshd@7-5-10.0.0.33:22-20.61.25.254:41794.service: Deactivated successfully. Sep 11 18:08:05.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-10.0.0.33:22-20.61.25.254:41794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.244095 systemd[1]: session-11.scope: Deactivated successfully. Sep 11 18:08:05.244748 systemd-logind[2508]: Session 11 logged out. Waiting for processes to exit. Sep 11 18:08:05.245854 systemd-logind[2508]: Removed session 11. Sep 11 18:08:05.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-10.0.0.33:22-20.61.25.254:41796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.275197 systemd[1]: Started sshd@8-4100-10.0.0.33:22-20.61.25.254:41796.service - OpenSSH per-connection server daemon (20.61.25.254:41796). Sep 11 18:08:05.379000 audit[3257]: AUDIT1101 pid=3257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.380669 sshd[3257]: Accepted publickey for core from 20.61.25.254 port 41796 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.380000 audit[3257]: AUDIT1103 pid=3257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.380000 audit[3257]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe46fd4cd0 a2=3 a3=0 items=0 ppid=1 pid=3257 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.380000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.381613 sshd-session[3257]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.384751 systemd-logind[2508]: New session '12' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.395134 systemd[1]: Started session-12.scope - Session 12 of User core. Sep 11 18:08:05.396000 audit[3257]: AUDIT1105 pid=3257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.397000 audit[3261]: AUDIT1103 pid=3261 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.415190 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount2675411096.mount: Deactivated successfully. Sep 11 18:08:05.468336 sshd[3261]: Connection closed by 20.61.25.254 port 41796 Sep 11 18:08:05.469376 sshd-session[3257]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:05.468000 audit[3257]: AUDIT1106 pid=3257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.468000 audit[3257]: AUDIT1104 pid=3257 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.471194 systemd[1]: sshd@8-4100-10.0.0.33:22-20.61.25.254:41796.service: Deactivated successfully. Sep 11 18:08:05.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-10.0.0.33:22-20.61.25.254:41796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.472310 systemd[1]: session-12.scope: Deactivated successfully. Sep 11 18:08:05.472919 systemd-logind[2508]: Session 12 logged out. Waiting for processes to exit. Sep 11 18:08:05.473824 systemd-logind[2508]: Removed session 12. Sep 11 18:08:05.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-10.0.0.33:22-20.61.25.254:41846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.514723 systemd[1]: Started sshd@10-4102-10.0.0.33:22-20.61.25.254:41846.service - OpenSSH per-connection server daemon (20.61.25.254:41846). Sep 11 18:08:05.518227 systemd[1]: Started sshd@11-6-10.0.0.33:22-20.61.25.254:41832.service - OpenSSH per-connection server daemon (20.61.25.254:41832). Sep 11 18:08:05.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-6-10.0.0.33:22-20.61.25.254:41832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.520281 systemd[1]: Started sshd@12-7-10.0.0.33:22-20.61.25.254:41850.service - OpenSSH per-connection server daemon (20.61.25.254:41850). Sep 11 18:08:05.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-7-10.0.0.33:22-20.61.25.254:41850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.521488 systemd[1]: Started sshd@13-4103-10.0.0.33:22-20.61.25.254:41802.service - OpenSSH per-connection server daemon (20.61.25.254:41802). Sep 11 18:08:05.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4103-10.0.0.33:22-20.61.25.254:41802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.523979 systemd[1]: Started sshd@14-8-10.0.0.33:22-20.61.25.254:41798.service - OpenSSH per-connection server daemon (20.61.25.254:41798). Sep 11 18:08:05.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-8-10.0.0.33:22-20.61.25.254:41798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.526419 systemd[1]: Started sshd@15-4104-10.0.0.33:22-20.61.25.254:41836.service - OpenSSH per-connection server daemon (20.61.25.254:41836). Sep 11 18:08:05.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4104-10.0.0.33:22-20.61.25.254:41836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.529288 systemd[1]: Started sshd@16-9-10.0.0.33:22-20.61.25.254:41812.service - OpenSSH per-connection server daemon (20.61.25.254:41812). Sep 11 18:08:05.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-9-10.0.0.33:22-20.61.25.254:41812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.531403 systemd[1]: Started sshd@17-4105-10.0.0.33:22-20.61.25.254:41824.service - OpenSSH per-connection server daemon (20.61.25.254:41824). Sep 11 18:08:05.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4105-10.0.0.33:22-20.61.25.254:41824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.534325 systemd[1]: Started sshd@18-10-10.0.0.33:22-20.61.25.254:41800.service - OpenSSH per-connection server daemon (20.61.25.254:41800). Sep 11 18:08:05.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10-10.0.0.33:22-20.61.25.254:41800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.542598 systemd[1]: Started sshd@9-4101-10.0.0.33:22-20.61.25.254:41820.service - OpenSSH per-connection server daemon (20.61.25.254:41820). Sep 11 18:08:05.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-10.0.0.33:22-20.61.25.254:41820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:05.668000 audit[3280]: AUDIT1101 pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.670552 sshd[3280]: Accepted publickey for core from 20.61.25.254 port 41850 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.669000 audit[3280]: AUDIT1103 pid=3280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.670000 audit[3280]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe34254630 a2=3 a3=0 items=0 ppid=1 pid=3280 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.670000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.671444 sshd-session[3280]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.678235 systemd-logind[2508]: New session '13' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.682159 systemd[1]: Started session-13.scope - Session 13 of User core. Sep 11 18:08:05.683000 audit[3280]: AUDIT1105 pid=3280 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.685000 audit[3309]: AUDIT1103 pid=3309 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.691000 audit[3279]: AUDIT1101 pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.692502 sshd[3279]: Accepted publickey for core from 20.61.25.254 port 41832 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.691000 audit[3279]: AUDIT1103 pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.692000 audit[3279]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdf490f840 a2=3 a3=0 items=0 ppid=1 pid=3279 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.692000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.693419 sshd-session[3279]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.699068 systemd-logind[2508]: New session '14' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.700000 audit[3284]: AUDIT1101 pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.702269 systemd[1]: Started session-14.scope - Session 14 of User core. Sep 11 18:08:05.703391 sshd[3284]: Accepted publickey for core from 20.61.25.254 port 41812 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.705986 sshd-session[3284]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.704000 audit[3284]: AUDIT1103 pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.704000 audit[3284]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe6c7c5fe0 a2=3 a3=0 items=0 ppid=1 pid=3284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.704000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.710000 audit[3279]: AUDIT1105 pid=3279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.713000 audit[3314]: AUDIT1103 pid=3314 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.717000 audit[3287]: AUDIT1101 pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.718000 audit[3287]: AUDIT1103 pid=3287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.720086 sshd[3287]: Accepted publickey for core from 20.61.25.254 port 41820 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.719000 audit[3287]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc876813b0 a2=3 a3=0 items=0 ppid=1 pid=3287 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.719000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.720530 systemd-logind[2508]: New session '15' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.720783 sshd-session[3287]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.723166 systemd[1]: Started session-15.scope - Session 15 of User core. Sep 11 18:08:05.727000 audit[3284]: AUDIT1105 pid=3284 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.731000 audit[3320]: AUDIT1103 pid=3320 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.733152 systemd-logind[2508]: New session '16' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.734000 audit[3278]: AUDIT1101 pid=3278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.735000 audit[3278]: AUDIT1103 pid=3278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.735000 audit[3283]: AUDIT1101 pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.736000 audit[3278]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe98920f50 a2=3 a3=0 items=0 ppid=1 pid=3278 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.736000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.737000 audit[3282]: AUDIT1101 pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.738318 systemd[1]: Started session-16.scope - Session 16 of User core. Sep 11 18:08:05.738808 sshd[3283]: Accepted publickey for core from 20.61.25.254 port 41836 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.738988 sshd[3278]: Accepted publickey for core from 20.61.25.254 port 41846 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.740432 sshd-session[3278]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.740825 sshd[3282]: Accepted publickey for core from 20.61.25.254 port 41798 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.740000 audit[3283]: AUDIT1103 pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.740000 audit[3283]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdd796acc0 a2=3 a3=0 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.740000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.741930 sshd-session[3283]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.742000 audit[3282]: AUDIT1103 pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.742000 audit[3282]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff736f9be0 a2=3 a3=0 items=0 ppid=1 pid=3282 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.742000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.743972 sshd-session[3282]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.744000 audit[3287]: AUDIT1105 pid=3287 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.748000 audit[3330]: AUDIT1103 pid=3330 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.754000 audit[3285]: AUDIT1101 pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.757204 systemd-logind[2508]: New session '19' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.758278 sshd[3285]: Accepted publickey for core from 20.61.25.254 port 41824 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.757000 audit[3281]: AUDIT1101 pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.759000 audit[3285]: AUDIT1103 pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.760740 sshd[3281]: Accepted publickey for core from 20.61.25.254 port 41802 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.759000 audit[3281]: AUDIT1103 pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.759000 audit[3281]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe498abd40 a2=3 a3=0 items=0 ppid=1 pid=3281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.759000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.760000 audit[3285]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc85605d10 a2=3 a3=0 items=0 ppid=1 pid=3285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.760000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.761255 sshd-session[3281]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.761413 sshd-session[3285]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.762510 systemd[1]: Started session-19.scope - Session 19 of User core. Sep 11 18:08:05.771060 systemd-logind[2508]: New session '17' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.774707 systemd[1]: Started session-17.scope - Session 17 of User core. Sep 11 18:08:05.781754 systemd-logind[2508]: New session '18' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.783000 audit[3286]: AUDIT1101 pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.785312 sshd[3286]: Accepted publickey for core from 20.61.25.254 port 41800 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:05.784000 audit[3286]: AUDIT1103 pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.784000 audit[3286]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe7b28e1f0 a2=3 a3=0 items=0 ppid=1 pid=3286 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:05.784000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:05.786323 systemd[1]: Started session-18.scope - Session 18 of User core. Sep 11 18:08:05.790081 sshd-session[3286]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:05.795985 systemd-logind[2508]: New session '21' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.799259 systemd[1]: Started session-21.scope - Session 21 of User core. Sep 11 18:08:05.806178 systemd-logind[2508]: New session '20' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.809149 systemd[1]: Started session-20.scope - Session 20 of User core. Sep 11 18:08:05.815253 systemd-logind[2508]: New session '22' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:05.819449 systemd[1]: Started session-22.scope - Session 22 of User core. Sep 11 18:08:05.820000 audit[3278]: AUDIT1105 pid=3278 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.821000 audit[3282]: AUDIT1105 pid=3282 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.824000 audit[3354]: AUDIT1103 pid=3354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.827000 audit[3353]: AUDIT1103 pid=3353 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.832000 audit[3286]: AUDIT1105 pid=3286 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.834670 systemd[1]: tmp-containerd\x2dmount4000852429.mount: Deactivated successfully. Sep 11 18:08:05.835000 audit[3285]: AUDIT1105 pid=3285 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.835000 audit[3283]: AUDIT1105 pid=3283 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.838000 audit[3281]: AUDIT1105 pid=3281 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.840000 audit[3360]: AUDIT1103 pid=3360 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.841000 audit[3358]: AUDIT1103 pid=3358 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.844000 audit[3363]: AUDIT1103 pid=3363 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.853000 audit[3364]: AUDIT1103 pid=3364 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:05.853925 systemd[1]: tmp-containerd\x2dmount1344703841.mount: Deactivated successfully. Sep 11 18:08:06.366726 containerd[2527]: time="2026-09-11T18:08:06.366688932Z" level=info msg="connecting to shim a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0" address="unix:///run/containerd/s/09d89833dd626d702ea18d89d23f7174bfc6a9b4ee097fcfa9214f5006712b92" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.386964 containerd[2527]: time="2026-09-11T18:08:06.386911476Z" level=info msg="connecting to shim 1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad" address="unix:///run/containerd/s/17df833a52e79d5e7e49f5113659afb0f2318ebb336318525ab4e06d47828b09" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.393283 systemd[1]: Started docker-a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0.scope - libcontainer container a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0. Sep 11 18:08:06.408239 containerd[2527]: time="2026-09-11T18:08:06.408160081Z" level=info msg="connecting to shim 628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a" address="unix:///run/containerd/s/980490960527fac96112004f4e75a2bccb120bfd91f8a216a398abaa1bdc9666" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.420169 systemd[1]: Started docker-1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad.scope - libcontainer container 1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad. Sep 11 18:08:06.438000 audit: BPF prog-id=56 op=LOAD Sep 11 18:08:06.439000 audit: BPF prog-id=57 op=LOAD Sep 11 18:08:06.440000 audit: BPF prog-id=58 op=LOAD Sep 11 18:08:06.439000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2ead2ee31fd8 a2=98 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.442000 audit: BPF prog-id=57 op=UNLOAD Sep 11 18:08:06.442000 audit[3456]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.443000 audit: BPF prog-id=59 op=LOAD Sep 11 18:08:06.443000 audit: BPF prog-id=60 op=LOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2c1dd7bb1fd8 a2=98 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.443000 audit: BPF prog-id=60 op=UNLOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.443000 audit: BPF prog-id=61 op=LOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2c1dd7bb2290 a2=98 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.443000 audit: BPF prog-id=62 op=LOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2c1dd7bb1fe8 a2=98 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.443000 audit: BPF prog-id=62 op=UNLOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.443000 audit: BPF prog-id=61 op=UNLOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.443000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2ead2ee32290 a2=98 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.443000 audit: BPF prog-id=63 op=LOAD Sep 11 18:08:06.443000 audit[3489]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2c1dd7bb24f0 a2=98 a3=0 items=0 ppid=3471 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31323430633061386637373032306237386436663234646634 Sep 11 18:08:06.444000 audit: BPF prog-id=64 op=LOAD Sep 11 18:08:06.444000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2ead2ee31fe8 a2=98 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.444000 audit: BPF prog-id=64 op=UNLOAD Sep 11 18:08:06.444000 audit[3456]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.445000 audit: BPF prog-id=59 op=UNLOAD Sep 11 18:08:06.445000 audit[3456]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.445000 audit: BPF prog-id=65 op=LOAD Sep 11 18:08:06.445000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2ead2ee324f0 a2=98 a3=0 items=0 ppid=3440 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303438313661376234356339363534303436636232656233 Sep 11 18:08:06.457250 systemd[1]: Started docker-628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a.scope - libcontainer container 628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a. Sep 11 18:08:06.481870 containerd[2527]: time="2026-09-11T18:08:06.481803782Z" level=info msg="connecting to shim c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246" address="unix:///run/containerd/s/5ae261b046543f0cacba8d8dafa6368f4f6907775fa31cddf035a5bcebd6ff10" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.487000 audit: BPF prog-id=66 op=LOAD Sep 11 18:08:06.489000 audit: BPF prog-id=67 op=LOAD Sep 11 18:08:06.489000 audit[3528]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=182bde731fd8 a2=98 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.489000 audit: BPF prog-id=67 op=UNLOAD Sep 11 18:08:06.489000 audit[3528]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.490000 audit: BPF prog-id=68 op=LOAD Sep 11 18:08:06.490000 audit[3528]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=182bde732290 a2=98 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.490000 audit: BPF prog-id=69 op=LOAD Sep 11 18:08:06.490000 audit[3528]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=182bde731fe8 a2=98 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.491000 audit: BPF prog-id=69 op=UNLOAD Sep 11 18:08:06.491000 audit[3528]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.494000 audit: BPF prog-id=68 op=UNLOAD Sep 11 18:08:06.494000 audit[3528]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.497000 audit: BPF prog-id=70 op=LOAD Sep 11 18:08:06.497000 audit[3528]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=182bde7324f0 a2=98 a3=0 items=0 ppid=3517 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36323861633135343532363838643134353965396364363636 Sep 11 18:08:06.510926 containerd[2527]: time="2026-09-11T18:08:06.510903650Z" level=info msg="connecting to shim 571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8" address="unix:///run/containerd/s/d99d1256e9c9eac7cb4eed68c90317e34bd29f54f0ab2e99bba6a3d88db24f2d" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.520289 containerd[2527]: time="2026-09-11T18:08:06.520269402Z" level=info msg="connecting to shim 695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0" address="unix:///run/containerd/s/2b57969d8a940f75a6ea354d42de55869caeba7cc3548988975ac6fb07ad8c9e" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.535025 containerd[2527]: time="2026-09-11T18:08:06.534622758Z" level=info msg="connecting to shim 0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f" address="unix:///run/containerd/s/1f368e85767217ff30e984e152b15aa124315215db2eaa3dc3846032fe65de85" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.539068 kernel: docker0: port 1(vethb76645c) entered blocking state Sep 11 18:08:06.539174 kernel: docker0: port 1(vethb76645c) entered disabled state Sep 11 18:08:06.543332 kernel: vethb76645c: entered allmulticast mode Sep 11 18:08:06.543384 kernel: vethb76645c: entered promiscuous mode Sep 11 18:08:06.536000 audit: ANOM_PROMISCUOUS dev=vethb76645c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.536000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109e4ed0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.536000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.549000 audit[3667]: NETFILTER_CFG table=raw:38 family=2 entries=3 op=nft_register_chain pid=3667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.549000 audit[3667]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc0c5dfe60 a2=0 a3=0 items=0 ppid=2991 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.549000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.550902 containerd[2527]: time="2026-09-11T18:08:06.550729910Z" level=info msg="connecting to shim 9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145" address="unix:///run/containerd/s/5b237f074229561529b7e6f3ccac507a90eb4bc21afeb2d0aaf5e6acc8c40ee9" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.551183 systemd-networkd[2304]: vethb76645c: Link UP Sep 11 18:08:06.560276 containerd[2527]: time="2026-09-11T18:08:06.558947561Z" level=info msg="connecting to shim 66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af" address="unix:///run/containerd/s/f064d00de6c1b71b89e8436163388741056bee2f41f76b40ca22692afb27b62c" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.560276 containerd[2527]: time="2026-09-11T18:08:06.559476512Z" level=info msg="connecting to shim dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a" address="unix:///run/containerd/s/d8d803b99d5033261b0778fb407df105636f867caf0122f966edcaa1048078bd" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:06.563061 kernel: eth0: renamed from vethc554bc3 Sep 11 18:08:06.568275 kernel: docker0: port 1(vethb76645c) entered blocking state Sep 11 18:08:06.567667 systemd-networkd[2304]: vethb76645c: Gained carrier Sep 11 18:08:06.568378 kernel: docker0: port 1(vethb76645c) entered forwarding state Sep 11 18:08:06.567861 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:06.575024 kernel: docker0: port 2(veth587e2f0) entered blocking state Sep 11 18:08:06.575093 kernel: docker0: port 2(veth587e2f0) entered disabled state Sep 11 18:08:06.578027 kernel: veth587e2f0: entered allmulticast mode Sep 11 18:08:06.569000 audit: ANOM_PROMISCUOUS dev=veth587e2f0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.580031 kernel: veth587e2f0: entered promiscuous mode Sep 11 18:08:06.569000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155ef00 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.569000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.585000 audit[3707]: NETFILTER_CFG table=raw:39 family=2 entries=1 op=nft_register_rule pid=3707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.585000 audit[3707]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe7aa8af20 a2=0 a3=0 items=0 ppid=2991 pid=3707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.585000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.586767 systemd-networkd[2304]: veth587e2f0: Link UP Sep 11 18:08:06.605249 dockerd[2991]: time="2026-09-11T18:08:06.605073856Z" level=info msg="sbJoin: gwep4 ''->'c11cef2e24ae', gwep6 ''->''" eid=c11cef2e24ae ep=sleepy_dhawan net=bridge nid=ad3b593e9776 Sep 11 18:08:06.607023 kernel: eth0: renamed from veth8235f92 Sep 11 18:08:06.609415 systemd[1]: Started docker-695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0.scope - libcontainer container 695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0. Sep 11 18:08:06.610070 kernel: docker0: port 2(veth587e2f0) entered blocking state Sep 11 18:08:06.610120 kernel: docker0: port 2(veth587e2f0) entered forwarding state Sep 11 18:08:06.610216 systemd-networkd[2304]: veth587e2f0: Gained carrier Sep 11 18:08:06.615689 kernel: docker0: port 3(veth27e884b) entered blocking state Sep 11 18:08:06.615742 kernel: docker0: port 3(veth27e884b) entered disabled state Sep 11 18:08:06.621303 kernel: veth27e884b: entered allmulticast mode Sep 11 18:08:06.611000 audit: ANOM_PROMISCUOUS dev=veth27e884b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.628362 kernel: veth27e884b: entered promiscuous mode Sep 11 18:08:06.627817 systemd[1]: Started docker-0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f.scope - libcontainer container 0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f. Sep 11 18:08:06.611000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109e5b00 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.611000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.643000 audit[3783]: NETFILTER_CFG table=raw:40 family=2 entries=1 op=nft_register_rule pid=3783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.643000 audit[3783]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffff7e6d820 a2=0 a3=0 items=0 ppid=2991 pid=3783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.643000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.645685 systemd-networkd[2304]: veth27e884b: Link UP Sep 11 18:08:06.647200 systemd[1]: Started docker-c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246.scope - libcontainer container c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246. Sep 11 18:08:06.656268 dockerd[2991]: time="2026-09-11T18:08:06.656243197Z" level=info msg="sbJoin: gwep4 ''->'6deb4162ccc0', gwep6 ''->''" eid=6deb4162ccc0 ep=sharp_swanson net=bridge nid=ad3b593e9776 Sep 11 18:08:06.659488 kernel: eth0: renamed from veth26ab7e8 Sep 11 18:08:06.670228 systemd[1]: Started docker-9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145.scope - libcontainer container 9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145. Sep 11 18:08:06.674049 kernel: docker0: port 3(veth27e884b) entered blocking state Sep 11 18:08:06.674096 kernel: docker0: port 3(veth27e884b) entered forwarding state Sep 11 18:08:06.674264 systemd-networkd[2304]: veth27e884b: Gained carrier Sep 11 18:08:06.684171 systemd[1]: Started docker-571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8.scope - libcontainer container 571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8. Sep 11 18:08:06.685840 systemd[1]: Started docker-66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af.scope - libcontainer container 66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af. Sep 11 18:08:06.692000 audit: BPF prog-id=71 op=LOAD Sep 11 18:08:06.694088 dockerd[2991]: time="2026-09-11T18:08:06.687223959Z" level=info msg="sbJoin: gwep4 ''->'7b8f336583d8', gwep6 ''->''" eid=7b8f336583d8 ep=affectionate_shaw net=bridge nid=ad3b593e9776 Sep 11 18:08:06.694000 audit: BPF prog-id=72 op=LOAD Sep 11 18:08:06.695000 audit: BPF prog-id=73 op=LOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=aa91be33fd8 a2=98 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.695000 audit: BPF prog-id=73 op=UNLOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.695000 audit: BPF prog-id=74 op=LOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=aa91be34290 a2=98 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.695000 audit: BPF prog-id=75 op=LOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=aa91be33fe8 a2=98 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.695000 audit: BPF prog-id=75 op=UNLOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.695000 audit: BPF prog-id=74 op=UNLOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.695000 audit: BPF prog-id=76 op=LOAD Sep 11 18:08:06.695000 audit[3694]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=aa91be344f0 a2=98 a3=0 items=0 ppid=3574 pid=3694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63336537643635663737353863393863643664613234306564 Sep 11 18:08:06.696000 audit: BPF prog-id=77 op=LOAD Sep 11 18:08:06.698000 audit: BPF prog-id=78 op=LOAD Sep 11 18:08:06.700000 audit: BPF prog-id=79 op=LOAD Sep 11 18:08:06.700000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=bd1d8b3fd8 a2=98 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.700000 audit: BPF prog-id=79 op=UNLOAD Sep 11 18:08:06.700000 audit[3686]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.700000 audit: BPF prog-id=80 op=LOAD Sep 11 18:08:06.700000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=bd1d8b4290 a2=98 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.701000 audit: BPF prog-id=81 op=LOAD Sep 11 18:08:06.701000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=bd1d8b3fe8 a2=98 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.701000 audit: BPF prog-id=81 op=UNLOAD Sep 11 18:08:06.701000 audit[3686]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.702000 audit: BPF prog-id=80 op=UNLOAD Sep 11 18:08:06.704000 audit: BPF prog-id=82 op=LOAD Sep 11 18:08:06.702000 audit[3686]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.704000 audit[3681]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3433eb50dfd8 a2=98 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.711149 systemd[1]: Started docker-dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a.scope - libcontainer container dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a. Sep 11 18:08:06.712000 audit: BPF prog-id=83 op=LOAD Sep 11 18:08:06.713000 audit: BPF prog-id=82 op=UNLOAD Sep 11 18:08:06.713000 audit[3681]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.713000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.712000 audit[3744]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=186deb6a9fd8 a2=98 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.715000 audit: BPF prog-id=83 op=UNLOAD Sep 11 18:08:06.709000 audit: BPF prog-id=84 op=LOAD Sep 11 18:08:06.720000 audit: BPF prog-id=85 op=LOAD Sep 11 18:08:06.720000 audit[3681]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3433eb50e290 a2=98 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.720000 audit: BPF prog-id=86 op=LOAD Sep 11 18:08:06.715000 audit[3744]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.715000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.721000 audit: BPF prog-id=87 op=LOAD Sep 11 18:08:06.721000 audit[3744]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=186deb6aa290 a2=98 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.721000 audit: BPF prog-id=88 op=LOAD Sep 11 18:08:06.720000 audit[3681]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=3433eb50dfe8 a2=98 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.709000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=bd1d8b44f0 a2=98 a3=0 items=0 ppid=3610 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.721000 audit: BPF prog-id=86 op=UNLOAD Sep 11 18:08:06.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393566323530636465616638656538636332643566313065 Sep 11 18:08:06.721000 audit[3681]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.724000 audit: BPF prog-id=85 op=UNLOAD Sep 11 18:08:06.724000 audit[3681]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.724000 audit: BPF prog-id=89 op=LOAD Sep 11 18:08:06.721000 audit[3744]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=186deb6a9fe8 a2=98 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.725000 audit: BPF prog-id=88 op=UNLOAD Sep 11 18:08:06.725000 audit[3744]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.725000 audit: BPF prog-id=87 op=UNLOAD Sep 11 18:08:06.725000 audit[3744]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.725000 audit: BPF prog-id=90 op=LOAD Sep 11 18:08:06.724000 audit[3681]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3433eb50e4f0 a2=98 a3=0 items=0 ppid=3618 pid=3681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30653236353164363064613136616236643433646138633834 Sep 11 18:08:06.725000 audit[3744]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=186deb6aa4f0 a2=98 a3=0 items=0 ppid=3649 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39656166666166383634646430303232363165356563396466 Sep 11 18:08:06.740000 audit: BPF prog-id=91 op=LOAD Sep 11 18:08:06.743000 audit: BPF prog-id=92 op=LOAD Sep 11 18:08:06.750000 audit: ANOM_PROMISCUOUS dev=veth23c6eba prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.756831 kernel: docker0: port 4(veth23c6eba) entered blocking state Sep 11 18:08:06.756851 kernel: docker0: port 4(veth23c6eba) entered disabled state Sep 11 18:08:06.756867 kernel: veth23c6eba: entered allmulticast mode Sep 11 18:08:06.756881 kernel: veth23c6eba: entered promiscuous mode Sep 11 18:08:06.750000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111ce120 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.750000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.758000 audit: BPF prog-id=93 op=LOAD Sep 11 18:08:06.758000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b4708331fd8 a2=98 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.758000 audit: BPF prog-id=93 op=UNLOAD Sep 11 18:08:06.758000 audit[3720]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.758000 audit: BPF prog-id=94 op=LOAD Sep 11 18:08:06.758000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b4708332290 a2=98 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.759000 audit: BPF prog-id=95 op=LOAD Sep 11 18:08:06.759000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3b4708331fe8 a2=98 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.759000 audit: BPF prog-id=95 op=UNLOAD Sep 11 18:08:06.759000 audit[3720]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.760000 audit: BPF prog-id=94 op=UNLOAD Sep 11 18:08:06.760000 audit[3720]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.761000 audit: BPF prog-id=96 op=LOAD Sep 11 18:08:06.761000 audit[3720]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b47083324f0 a2=98 a3=0 items=0 ppid=3665 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36366638326464386266346131643630653938643262376332 Sep 11 18:08:06.766000 audit: BPF prog-id=97 op=LOAD Sep 11 18:08:06.768000 audit: BPF prog-id=98 op=LOAD Sep 11 18:08:06.769000 audit[3871]: NETFILTER_CFG table=raw:41 family=2 entries=1 op=nft_register_rule pid=3871 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.769000 audit[3871]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd1b619010 a2=0 a3=0 items=0 ppid=2991 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.769000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E350000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.768000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2bf3fcf31fd8 a2=98 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.771000 audit: BPF prog-id=98 op=UNLOAD Sep 11 18:08:06.772690 systemd-networkd[2304]: veth23c6eba: Link UP Sep 11 18:08:06.771000 audit[3688]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.772000 audit: BPF prog-id=99 op=LOAD Sep 11 18:08:06.772000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2bf3fcf32290 a2=98 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.773000 audit: BPF prog-id=100 op=LOAD Sep 11 18:08:06.773000 audit: BPF prog-id=101 op=LOAD Sep 11 18:08:06.773000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2bf3fcf31fe8 a2=98 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.773000 audit: BPF prog-id=100 op=UNLOAD Sep 11 18:08:06.773000 audit[3688]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.773000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=86549fb1fd8 a2=98 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.776000 audit: BPF prog-id=101 op=UNLOAD Sep 11 18:08:06.776000 audit[3770]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.776000 audit: BPF prog-id=99 op=UNLOAD Sep 11 18:08:06.776000 audit: BPF prog-id=102 op=LOAD Sep 11 18:08:06.776000 audit[3688]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.776000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=86549fb2290 a2=98 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.779000 audit: BPF prog-id=103 op=LOAD Sep 11 18:08:06.779000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=86549fb1fe8 a2=98 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.776000 audit: BPF prog-id=104 op=LOAD Sep 11 18:08:06.776000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2bf3fcf324f0 a2=98 a3=0 items=0 ppid=3607 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373161616237306338353663393237653966333064663637 Sep 11 18:08:06.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.782000 audit: BPF prog-id=103 op=UNLOAD Sep 11 18:08:06.782000 audit[3770]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.782000 audit: BPF prog-id=102 op=UNLOAD Sep 11 18:08:06.782000 audit[3770]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.783568 kernel: eth0: renamed from vetha17afff Sep 11 18:08:06.782000 audit: BPF prog-id=105 op=LOAD Sep 11 18:08:06.782000 audit[3770]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=86549fb24f0 a2=98 a3=0 items=0 ppid=3668 pid=3770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64666239626634636361366135396536373364303063373632 Sep 11 18:08:06.791187 kernel: docker0: port 4(veth23c6eba) entered blocking state Sep 11 18:08:06.791240 kernel: docker0: port 4(veth23c6eba) entered forwarding state Sep 11 18:08:06.791362 systemd-networkd[2304]: veth23c6eba: Gained carrier Sep 11 18:08:06.800064 kernel: docker0: port 5(veth2dc2201) entered blocking state Sep 11 18:08:06.800111 kernel: docker0: port 5(veth2dc2201) entered disabled state Sep 11 18:08:06.806176 kernel: veth2dc2201: entered allmulticast mode Sep 11 18:08:06.795000 audit: ANOM_PROMISCUOUS dev=veth2dc2201 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.807575 kernel: veth2dc2201: entered promiscuous mode Sep 11 18:08:06.795000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca810d4d4a0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.795000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.814189 dockerd[2991]: time="2026-09-11T18:08:06.814158364Z" level=info msg="sbJoin: gwep4 ''->'a709773efce6', gwep6 ''->''" eid=a709773efce6 ep=kind_khorana net=bridge nid=ad3b593e9776 Sep 11 18:08:06.836000 audit[3875]: NETFILTER_CFG table=raw:42 family=2 entries=1 op=nft_register_rule pid=3875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.836000 audit[3875]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffed2023700 a2=0 a3=0 items=0 ppid=2991 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.836000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E360000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.839179 systemd-networkd[2304]: veth2dc2201: Link UP Sep 11 18:08:06.851577 kernel: eth0: renamed from veth6cb956d Sep 11 18:08:06.855095 kernel: docker0: port 6(veth4672481) entered blocking state Sep 11 18:08:06.855144 kernel: docker0: port 6(veth4672481) entered disabled state Sep 11 18:08:06.851000 audit: ANOM_PROMISCUOUS dev=veth4672481 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.858023 kernel: veth4672481: entered allmulticast mode Sep 11 18:08:06.858055 kernel: veth4672481: entered promiscuous mode Sep 11 18:08:06.851000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca810d4d950 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.851000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.862636 systemd-networkd[2304]: veth2dc2201: Gained carrier Sep 11 18:08:06.863247 kernel: docker0: port 5(veth2dc2201) entered blocking state Sep 11 18:08:06.863272 kernel: docker0: port 5(veth2dc2201) entered forwarding state Sep 11 18:08:06.866000 audit[3881]: NETFILTER_CFG table=raw:43 family=2 entries=1 op=nft_register_rule pid=3881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.869284 systemd[1]: docker-1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad.scope: Deactivated successfully. Sep 11 18:08:06.866000 audit[3881]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe07f22bb0 a2=0 a3=0 items=0 ppid=2991 pid=3881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.866000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E370000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.870564 systemd-networkd[2304]: veth4672481: Link UP Sep 11 18:08:06.885173 dockerd[2991]: time="2026-09-11T18:08:06.884426715Z" level=info msg="ignoring event" container=1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:06.885510 containerd[2527]: time="2026-09-11T18:08:06.885449719Z" level=info msg="shim disconnected" id=1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad namespace=moby Sep 11 18:08:06.885564 containerd[2527]: time="2026-09-11T18:08:06.885511747Z" level=info msg="cleaning up after shim disconnected" id=1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad namespace=moby Sep 11 18:08:06.885564 containerd[2527]: time="2026-09-11T18:08:06.885519674Z" level=info msg="cleaning up dead shim" id=1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad namespace=moby Sep 11 18:08:06.927861 dockerd[2991]: time="2026-09-11T18:08:06.927830269Z" level=info msg="sbJoin: gwep4 ''->'5a4a714d8a22', gwep6 ''->''" eid=5a4a714d8a22 ep=sleepy_shaw net=bridge nid=ad3b593e9776 Sep 11 18:08:06.935028 kernel: eth0: renamed from veth984d04a Sep 11 18:08:06.935063 kernel: docker0: port 7(veth0d8ead5) entered blocking state Sep 11 18:08:06.936456 kernel: docker0: port 7(veth0d8ead5) entered disabled state Sep 11 18:08:06.937329 kernel: veth0d8ead5: entered allmulticast mode Sep 11 18:08:06.938848 kernel: veth0d8ead5: entered promiscuous mode Sep 11 18:08:06.934000 audit: ANOM_PROMISCUOUS dev=veth0d8ead5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.934000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a04e0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.934000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.946924 kernel: docker0: port 6(veth4672481) entered blocking state Sep 11 18:08:06.946968 kernel: docker0: port 6(veth4672481) entered forwarding state Sep 11 18:08:06.947845 systemd-networkd[2304]: veth4672481: Gained carrier Sep 11 18:08:06.947000 audit[3910]: NETFILTER_CFG table=raw:44 family=2 entries=1 op=nft_register_rule pid=3910 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.947000 audit[3910]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd3bd15010 a2=0 a3=0 items=0 ppid=2991 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.947000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E380000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.949157 systemd-networkd[2304]: veth0d8ead5: Link UP Sep 11 18:08:06.953030 kernel: vethc554bc3: renamed from eth0 Sep 11 18:08:06.959785 systemd-networkd[2304]: vethb76645c: Lost carrier Sep 11 18:08:06.960520 kernel: docker0: port 1(vethb76645c) entered disabled state Sep 11 18:08:06.962253 systemd[1]: docker-628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a.scope: Deactivated successfully. Sep 11 18:08:06.967539 dockerd[2991]: time="2026-09-11T18:08:06.967510063Z" level=info msg="sbJoin: gwep4 ''->'a33f915764b3', gwep6 ''->''" eid=a33f915764b3 ep=confident_lamport net=bridge nid=ad3b593e9776 Sep 11 18:08:06.979038 kernel: docker0: port 8(veth54de61b) entered blocking state Sep 11 18:08:06.979094 kernel: docker0: port 8(veth54de61b) entered disabled state Sep 11 18:08:06.979194 containerd[2527]: time="2026-09-11T18:08:06.979173502Z" level=info msg="shim disconnected" id=628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a namespace=moby Sep 11 18:08:06.979258 dockerd[2991]: time="2026-09-11T18:08:06.979225456Z" level=info msg="ignoring event" container=628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:06.979655 containerd[2527]: time="2026-09-11T18:08:06.979331396Z" level=info msg="cleaning up after shim disconnected" id=628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a namespace=moby Sep 11 18:08:06.979655 containerd[2527]: time="2026-09-11T18:08:06.979344411Z" level=info msg="cleaning up dead shim" id=628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a namespace=moby Sep 11 18:08:06.976000 audit: ANOM_PROMISCUOUS dev=veth54de61b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:06.981112 kernel: veth54de61b: entered allmulticast mode Sep 11 18:08:06.981142 kernel: veth54de61b: entered promiscuous mode Sep 11 18:08:06.981162 kernel: eth0: renamed from veth256dd9f Sep 11 18:08:06.976000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811310b10 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.976000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:06.983463 systemd[1]: docker-a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0.scope: Deactivated successfully. Sep 11 18:08:06.987605 kernel: docker0: port 7(veth0d8ead5) entered blocking state Sep 11 18:08:06.987547 systemd-networkd[2304]: veth0d8ead5: Gained carrier Sep 11 18:08:06.987705 kernel: docker0: port 7(veth0d8ead5) entered forwarding state Sep 11 18:08:06.989000 audit[3930]: NETFILTER_CFG table=raw:45 family=2 entries=1 op=nft_unregister_rule pid=3930 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:06.989000 audit[3930]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff11207360 a2=0 a3=0 items=0 ppid=2991 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.989000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.998562 systemd-networkd[2304]: vethb76645c: Link DOWN Sep 11 18:08:07.001022 kernel: docker0: port 1(vethb76645c) entered disabled state Sep 11 18:08:07.003000 audit[3943]: NETFILTER_CFG table=raw:46 family=2 entries=1 op=nft_register_rule pid=3943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.003000 audit[3943]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe188c6c90 a2=0 a3=0 items=0 ppid=2991 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.003000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E390000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:06.997000 audit: ANOM_PROMISCUOUS dev=vethb76645c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.009262 kernel: vethb76645c (unregistering): left allmulticast mode Sep 11 18:08:07.009282 dockerd[2991]: time="2026-09-11T18:08:07.006516053Z" level=info msg="sbJoin: gwep4 ''->'ecad20040c8e', gwep6 ''->''" eid=ecad20040c8e ep=clever_antonelli net=bridge nid=ad3b593e9776 Sep 11 18:08:07.009311 kernel: vethb76645c (unregistering): left promiscuous mode Sep 11 18:08:07.009327 kernel: docker0: port 1(vethb76645c) entered disabled state Sep 11 18:08:06.997000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca810ac66e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:06.997000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.016428 systemd-networkd[2304]: veth54de61b: Link UP Sep 11 18:08:07.020743 containerd[2527]: time="2026-09-11T18:08:07.020721010Z" level=info msg="shim disconnected" id=a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0 namespace=moby Sep 11 18:08:07.020743 containerd[2527]: time="2026-09-11T18:08:07.020744147Z" level=info msg="cleaning up after shim disconnected" id=a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0 namespace=moby Sep 11 18:08:07.020832 containerd[2527]: time="2026-09-11T18:08:07.020751606Z" level=info msg="cleaning up dead shim" id=a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0 namespace=moby Sep 11 18:08:07.021223 dockerd[2991]: time="2026-09-11T18:08:07.021199832Z" level=info msg="ignoring event" container=a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.033000 audit: BPF prog-id=58 op=UNLOAD Sep 11 18:08:07.033000 audit: BPF prog-id=63 op=UNLOAD Sep 11 18:08:07.081205 systemd[1]: docker-c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246.scope: Deactivated successfully. Sep 11 18:08:07.091530 containerd[2527]: time="2026-09-11T18:08:07.091503651Z" level=info msg="shim disconnected" id=c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246 namespace=moby Sep 11 18:08:07.091530 containerd[2527]: time="2026-09-11T18:08:07.091525013Z" level=info msg="cleaning up after shim disconnected" id=c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246 namespace=moby Sep 11 18:08:07.091530 containerd[2527]: time="2026-09-11T18:08:07.091532755Z" level=info msg="cleaning up dead shim" id=c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246 namespace=moby Sep 11 18:08:07.096719 dockerd[2991]: time="2026-09-11T18:08:07.091774661Z" level=info msg="ignoring event" container=c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.102262 kernel: docker0: port 1(veth5796746) entered blocking state Sep 11 18:08:07.102327 kernel: docker0: port 1(veth5796746) entered disabled state Sep 11 18:08:07.103732 kernel: veth5796746: entered allmulticast mode Sep 11 18:08:07.105100 kernel: veth5796746: entered promiscuous mode Sep 11 18:08:07.098000 audit: ANOM_PROMISCUOUS dev=veth5796746 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.098000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a1590 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.098000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.114028 kernel: eth0: renamed from vethc162f75 Sep 11 18:08:07.113000 audit[3995]: NETFILTER_CFG table=raw:47 family=2 entries=1 op=nft_register_rule pid=3995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.113000 audit[3995]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffce4ca2ad0 a2=0 a3=0 items=0 ppid=2991 pid=3995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.113000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.114788 systemd-networkd[2304]: veth5796746: Link UP Sep 11 18:08:07.117433 kernel: docker0: port 8(veth54de61b) entered blocking state Sep 11 18:08:07.117486 kernel: docker0: port 8(veth54de61b) entered forwarding state Sep 11 18:08:07.117755 systemd-networkd[2304]: veth54de61b: Gained carrier Sep 11 18:08:07.142109 systemd-networkd[2304]: veth27e884b: Lost carrier Sep 11 18:08:07.143024 kernel: docker0: port 3(veth27e884b) entered disabled state Sep 11 18:08:07.150217 kernel: veth26ab7e8: renamed from eth0 Sep 11 18:08:07.153664 kernel: docker0: port 9(vethb0438af) entered blocking state Sep 11 18:08:07.153711 kernel: docker0: port 9(vethb0438af) entered disabled state Sep 11 18:08:07.154630 kernel: vethb0438af: entered allmulticast mode Sep 11 18:08:07.150000 audit: ANOM_PROMISCUOUS dev=vethb0438af prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.156666 dockerd[2991]: time="2026-09-11T18:08:07.155888685Z" level=info msg="sbJoin: gwep4 ''->'2f833ad2bfd9', gwep6 ''->''" eid=2f833ad2bfd9 ep=practical_mendel net=bridge nid=ad3b593e9776 Sep 11 18:08:07.156701 kernel: vethb0438af: entered promiscuous mode Sep 11 18:08:07.150000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a0450 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.150000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.160000 audit[4005]: NETFILTER_CFG table=raw:48 family=2 entries=1 op=nft_register_rule pid=4005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.160000 audit[4005]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc3de5fed0 a2=0 a3=0 items=0 ppid=2991 pid=4005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.160000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E31300000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.165395 systemd[1]: docker-9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145.scope: Deactivated successfully. Sep 11 18:08:07.165737 systemd-networkd[2304]: vethb0438af: Link UP Sep 11 18:08:07.171023 kernel: veth8235f92: renamed from eth0 Sep 11 18:08:07.175472 systemd-networkd[2304]: veth587e2f0: Lost carrier Sep 11 18:08:07.176062 kernel: docker0: port 2(veth587e2f0) entered disabled state Sep 11 18:08:07.191519 dockerd[2991]: time="2026-09-11T18:08:07.191303816Z" level=info msg="ignoring event" container=9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.191582 containerd[2527]: time="2026-09-11T18:08:07.191377885Z" level=info msg="shim disconnected" id=9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145 namespace=moby Sep 11 18:08:07.191582 containerd[2527]: time="2026-09-11T18:08:07.191397177Z" level=info msg="cleaning up after shim disconnected" id=9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145 namespace=moby Sep 11 18:08:07.191582 containerd[2527]: time="2026-09-11T18:08:07.191404724Z" level=info msg="cleaning up dead shim" id=9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145 namespace=moby Sep 11 18:08:07.205024 kernel: eth0: renamed from veth2ed6a98 Sep 11 18:08:07.207021 kernel: docker0: port 1(veth5796746) entered blocking state Sep 11 18:08:07.207068 kernel: docker0: port 1(veth5796746) entered forwarding state Sep 11 18:08:07.207075 systemd-networkd[2304]: veth5796746: Gained carrier Sep 11 18:08:07.222433 kernel: docker0: port 4(veth23c6eba) entered disabled state Sep 11 18:08:07.222483 kernel: vetha17afff: renamed from eth0 Sep 11 18:08:07.222445 systemd-networkd[2304]: veth23c6eba: Lost carrier Sep 11 18:08:07.223156 systemd[1]: docker-571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8.scope: Deactivated successfully. Sep 11 18:08:07.225144 dockerd[2991]: time="2026-09-11T18:08:07.225124858Z" level=info msg="sbJoin: gwep4 ''->'969fee976ded', gwep6 ''->''" eid=969fee976ded ep=suspicious_snyder net=bridge nid=ad3b593e9776 Sep 11 18:08:07.233964 sshd[3314]: Connection closed by 20.61.25.254 port 41832 Sep 11 18:08:07.234839 sshd-session[3279]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:07.235000 audit[3279]: AUDIT1106 pid=3279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.235000 audit[4034]: NETFILTER_CFG table=raw:49 family=2 entries=1 op=nft_unregister_rule pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.235000 audit[4034]: SYSCALL arch=c000003e syscall=46 success=yes exit=392 a0=3 a1=7fff86633e20 a2=0 a3=0 items=0 ppid=2991 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.235000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.236000 audit[3279]: AUDIT1104 pid=3279 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.241324 containerd[2527]: time="2026-09-11T18:08:07.240043241Z" level=info msg="shim disconnected" id=571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8 namespace=moby Sep 11 18:08:07.241324 containerd[2527]: time="2026-09-11T18:08:07.240064224Z" level=info msg="cleaning up after shim disconnected" id=571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8 namespace=moby Sep 11 18:08:07.241324 containerd[2527]: time="2026-09-11T18:08:07.240071829Z" level=info msg="cleaning up dead shim" id=571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8 namespace=moby Sep 11 18:08:07.241338 systemd[1]: sshd@11-6-10.0.0.33:22-20.61.25.254:41832.service: Deactivated successfully. Sep 11 18:08:07.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-6-10.0.0.33:22-20.61.25.254:41832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.244031 kernel: eth0: renamed from veth9b27991 Sep 11 18:08:07.244992 systemd[1]: session-14.scope: Deactivated successfully. Sep 11 18:08:07.251259 systemd-logind[2508]: Session 14 logged out. Waiting for processes to exit. Sep 11 18:08:07.252444 dockerd[2991]: time="2026-09-11T18:08:07.252422997Z" level=info msg="ignoring event" container=571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.253000 audit[4058]: NETFILTER_CFG table=raw:50 family=2 entries=1 op=nft_unregister_rule pid=4058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.253000 audit[4058]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff17bad1f0 a2=0 a3=0 items=0 ppid=2991 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.253000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.259365 systemd-networkd[2304]: veth27e884b: Link DOWN Sep 11 18:08:07.261021 kernel: docker0: port 3(veth27e884b) entered disabled state Sep 11 18:08:07.258000 audit: ANOM_PROMISCUOUS dev=veth27e884b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4106-10.0.0.33:22-20.61.25.254:58234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.271267 kernel: veth27e884b (unregistering): left allmulticast mode Sep 11 18:08:07.267270 systemd[1]: Started sshd@19-4106-10.0.0.33:22-20.61.25.254:58234.service - OpenSSH per-connection server daemon (20.61.25.254:58234). Sep 11 18:08:07.271351 kernel: veth27e884b (unregistering): left promiscuous mode Sep 11 18:08:07.271369 kernel: docker0: port 3(veth27e884b) entered disabled state Sep 11 18:08:07.274446 systemd-logind[2508]: Removed session 14. Sep 11 18:08:07.258000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8114b5e40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.258000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.280000 audit[4061]: NETFILTER_CFG table=raw:51 family=2 entries=1 op=nft_unregister_rule pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.282163 systemd-networkd[2304]: veth587e2f0: Link DOWN Sep 11 18:08:07.284020 kernel: docker0: port 2(veth587e2f0) entered disabled state Sep 11 18:08:07.280000 audit[4061]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd3dc1f7f0 a2=0 a3=0 items=0 ppid=2991 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.280000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E350000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.278000 audit: ANOM_PROMISCUOUS dev=veth587e2f0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.289706 kernel: veth587e2f0 (unregistering): left allmulticast mode Sep 11 18:08:07.289733 kernel: veth587e2f0 (unregistering): left promiscuous mode Sep 11 18:08:07.289754 kernel: docker0: port 2(veth587e2f0) entered disabled state Sep 11 18:08:07.297551 kernel: docker0: port 9(vethb0438af) entered blocking state Sep 11 18:08:07.297613 kernel: docker0: port 9(vethb0438af) entered forwarding state Sep 11 18:08:07.278000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8a160 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.300021 kernel: docker0: port 5(veth2dc2201) entered disabled state Sep 11 18:08:07.300059 kernel: veth6cb956d: renamed from eth0 Sep 11 18:08:07.278000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.301650 systemd-networkd[2304]: vethb0438af: Gained carrier Sep 11 18:08:07.302296 kernel: docker0: port 4(veth23c6eba) entered disabled state Sep 11 18:08:07.301829 systemd-networkd[2304]: veth2dc2201: Lost carrier Sep 11 18:08:07.301912 systemd-networkd[2304]: veth23c6eba: Link DOWN Sep 11 18:08:07.299000 audit: ANOM_PROMISCUOUS dev=veth23c6eba prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.306841 kernel: veth23c6eba (unregistering): left allmulticast mode Sep 11 18:08:07.306865 kernel: veth23c6eba (unregistering): left promiscuous mode Sep 11 18:08:07.306882 kernel: docker0: port 4(veth23c6eba) entered disabled state Sep 11 18:08:07.299000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8a540 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.299000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.316000 audit: BPF prog-id=66 op=UNLOAD Sep 11 18:08:07.316000 audit: BPF prog-id=70 op=UNLOAD Sep 11 18:08:07.326394 kernel: docker0: port 6(veth4672481) entered disabled state Sep 11 18:08:07.329414 kernel: veth984d04a: renamed from eth0 Sep 11 18:08:07.326486 systemd-networkd[2304]: veth4672481: Lost carrier Sep 11 18:08:07.349000 audit: BPF prog-id=56 op=UNLOAD Sep 11 18:08:07.349000 audit: BPF prog-id=65 op=UNLOAD Sep 11 18:08:07.390063 containerd[2527]: time="2026-09-11T18:08:07.373532879Z" level=info msg="shim disconnected" id=695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0 namespace=moby Sep 11 18:08:07.390063 containerd[2527]: time="2026-09-11T18:08:07.373553392Z" level=info msg="cleaning up after shim disconnected" id=695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0 namespace=moby Sep 11 18:08:07.390063 containerd[2527]: time="2026-09-11T18:08:07.373561376Z" level=info msg="cleaning up dead shim" id=695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0 namespace=moby Sep 11 18:08:07.390400 dockerd[2991]: time="2026-09-11T18:08:07.373157291Z" level=info msg="ignoring event" container=695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.361287 systemd[1]: docker-695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0.scope: Deactivated successfully. Sep 11 18:08:07.400000 audit: BPF prog-id=72 op=UNLOAD Sep 11 18:08:07.400000 audit: BPF prog-id=76 op=UNLOAD Sep 11 18:08:07.407837 dockerd[2991]: time="2026-09-11T18:08:07.407814533Z" level=info msg="sbJoin: gwep4 ''->'05320ae6da30', gwep6 ''->''" eid=05320ae6da30 ep=lucid_wiles net=bridge nid=ad3b593e9776 Sep 11 18:08:07.408000 audit[4060]: AUDIT1101 pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.409382 sshd[4060]: Accepted publickey for core from 20.61.25.254 port 58234 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:07.409000 audit[4060]: AUDIT1103 pid=4060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.409000 audit[4060]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd4b1601f0 a2=3 a3=0 items=0 ppid=1 pid=4060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.409000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:07.410535 sshd-session[4060]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:07.423734 systemd-logind[2508]: New session '23' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:07.423000 audit[4100]: NETFILTER_CFG table=raw:52 family=2 entries=1 op=nft_unregister_rule pid=4100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.423000 audit[4100]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc402d7190 a2=0 a3=0 items=0 ppid=2991 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.423000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E360000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.426881 systemd[1]: run-docker-netns-b7dc51d94de9.mount: Deactivated successfully. Sep 11 18:08:07.427063 systemd[1]: run-docker-netns-276b91aedf57.mount: Deactivated successfully. Sep 11 18:08:07.427112 systemd[1]: run-docker-netns-f5ca0d78db3f.mount: Deactivated successfully. Sep 11 18:08:07.427153 systemd[1]: run-docker-netns-3eebde9a386d.mount: Deactivated successfully. Sep 11 18:08:07.427193 systemd[1]: var-lib-docker-rootfs-overlayfs-c3e7d65f7758c98cd6da240ed88496068dd14a2d8e1a22e31b6a0e067aca9246.mount: Deactivated successfully. Sep 11 18:08:07.427235 systemd[1]: var-lib-docker-rootfs-overlayfs-628ac15452688d1459e9cd666e71558eda67ef0e294959f5c7d04f33ffdf984a.mount: Deactivated successfully. Sep 11 18:08:07.427273 systemd[1]: var-lib-docker-rootfs-overlayfs-1240c0a8f77020b78d6f24df48e8a1df4db149ef6c4b485089a191bccfb596ad.mount: Deactivated successfully. Sep 11 18:08:07.427315 systemd[1]: var-lib-docker-rootfs-overlayfs-a04816a7b45c9654046cb2eb32000e2a4159e7959a03cebc4842742d4009aba0.mount: Deactivated successfully. Sep 11 18:08:07.430317 systemd-networkd[2304]: veth2dc2201: Link DOWN Sep 11 18:08:07.432107 kernel: docker0: port 5(veth2dc2201) entered disabled state Sep 11 18:08:07.432000 audit[4102]: NETFILTER_CFG table=raw:53 family=2 entries=1 op=nft_unregister_rule pid=4102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.432000 audit[4102]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd346a07d0 a2=0 a3=0 items=0 ppid=2991 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.432000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E370000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.428000 audit: ANOM_PROMISCUOUS dev=veth2dc2201 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.435520 kernel: veth2dc2201 (unregistering): left allmulticast mode Sep 11 18:08:07.435603 kernel: veth2dc2201 (unregistering): left promiscuous mode Sep 11 18:08:07.435620 kernel: docker0: port 5(veth2dc2201) entered disabled state Sep 11 18:08:07.435909 systemd[1]: Started session-23.scope - Session 23 of User core. Sep 11 18:08:07.438000 audit[4060]: AUDIT1105 pid=4060 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.440000 audit[4103]: AUDIT1103 pid=4103 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.428000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f440 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.428000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.444563 systemd-networkd[2304]: veth4672481: Link DOWN Sep 11 18:08:07.443000 audit: ANOM_PROMISCUOUS dev=veth4672481 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.443000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f460 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.443000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.482304 kernel: docker0: port 6(veth4672481) entered disabled state Sep 11 18:08:07.482329 kernel: veth4672481 (unregistering): left allmulticast mode Sep 11 18:08:07.482349 kernel: veth4672481 (unregistering): left promiscuous mode Sep 11 18:08:07.482368 kernel: docker0: port 6(veth4672481) entered disabled state Sep 11 18:08:07.488066 systemd[1]: run-docker-netns-0cda3b47e493.mount: Deactivated successfully. Sep 11 18:08:07.491796 systemd[1]: var-lib-docker-rootfs-overlayfs-9eaffaf864dd002261e5ec9df93b9caae23d490b86f557f16894c8f30f330145.mount: Deactivated successfully. Sep 11 18:08:07.493158 systemd[1]: docker-0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f.scope: Deactivated successfully. Sep 11 18:08:07.494306 systemd[1]: docker-dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a.scope: Deactivated successfully. Sep 11 18:08:07.498000 audit: BPF prog-id=77 op=UNLOAD Sep 11 18:08:07.498000 audit: BPF prog-id=90 op=UNLOAD Sep 11 18:08:07.501545 systemd[1]: run-docker-netns-6731b85570d8.mount: Deactivated successfully. Sep 11 18:08:07.512000 audit: BPF prog-id=97 op=UNLOAD Sep 11 18:08:07.512000 audit: BPF prog-id=104 op=UNLOAD Sep 11 18:08:07.515800 containerd[2527]: time="2026-09-11T18:08:07.515781071Z" level=info msg="shim disconnected" id=dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a namespace=moby Sep 11 18:08:07.515888 containerd[2527]: time="2026-09-11T18:08:07.515878398Z" level=info msg="cleaning up after shim disconnected" id=dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a namespace=moby Sep 11 18:08:07.515923 containerd[2527]: time="2026-09-11T18:08:07.515916610Z" level=info msg="cleaning up dead shim" id=dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a namespace=moby Sep 11 18:08:07.517717 dockerd[2991]: time="2026-09-11T18:08:07.517694578Z" level=info msg="ignoring event" container=dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.518232 dockerd[2991]: time="2026-09-11T18:08:07.518208348Z" level=info msg="ignoring event" container=0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.518468 containerd[2527]: time="2026-09-11T18:08:07.518447407Z" level=info msg="shim disconnected" id=0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f namespace=moby Sep 11 18:08:07.518538 containerd[2527]: time="2026-09-11T18:08:07.518528986Z" level=info msg="cleaning up after shim disconnected" id=0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f namespace=moby Sep 11 18:08:07.518588 containerd[2527]: time="2026-09-11T18:08:07.518565546Z" level=info msg="cleaning up dead shim" id=0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f namespace=moby Sep 11 18:08:07.538318 kernel: docker0: port 7(veth0d8ead5) entered disabled state Sep 11 18:08:07.538380 kernel: veth256dd9f: renamed from eth0 Sep 11 18:08:07.538357 systemd-networkd[2304]: veth0d8ead5: Lost carrier Sep 11 18:08:07.543821 systemd[1]: var-lib-docker-rootfs-overlayfs-571aab70c856c927e9f30df675b16b25176ac8c7e98963270557d905fce589c8.mount: Deactivated successfully. Sep 11 18:08:07.579638 systemd-networkd[2304]: veth54de61b: Lost carrier Sep 11 18:08:07.587251 kernel: docker0: port 8(veth54de61b) entered disabled state Sep 11 18:08:07.587285 kernel: vethc162f75: renamed from eth0 Sep 11 18:08:07.598000 audit[4161]: NETFILTER_CFG table=raw:54 family=2 entries=1 op=nft_unregister_rule pid=4161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.598000 audit[4161]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff70070660 a2=0 a3=0 items=0 ppid=2991 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.598000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E380000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.602077 sshd[3320]: Connection closed by 20.61.25.254 port 41812 Sep 11 18:08:07.602475 sshd-session[3284]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:07.602000 audit[3284]: AUDIT1106 pid=3284 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.602000 audit[3284]: AUDIT1104 pid=3284 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.605161 kernel: docker0: port 7(veth0d8ead5) entered disabled state Sep 11 18:08:07.605273 systemd-networkd[2304]: veth0d8ead5: Link DOWN Sep 11 18:08:07.606280 systemd[1]: sshd@16-9-10.0.0.33:22-20.61.25.254:41812.service: Deactivated successfully. Sep 11 18:08:07.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-9-10.0.0.33:22-20.61.25.254:41812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.602000 audit: ANOM_PROMISCUOUS dev=veth0d8ead5 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.609303 sshd[3309]: Connection closed by 20.61.25.254 port 41850 Sep 11 18:08:07.611223 kernel: veth0d8ead5 (unregistering): left allmulticast mode Sep 11 18:08:07.610365 systemd[1]: session-15.scope: Deactivated successfully. Sep 11 18:08:07.609585 sshd-session[3280]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:07.611471 kernel: veth0d8ead5 (unregistering): left promiscuous mode Sep 11 18:08:07.611491 kernel: docker0: port 7(veth0d8ead5) entered disabled state Sep 11 18:08:07.613114 systemd-logind[2508]: Session 15 logged out. Waiting for processes to exit. Sep 11 18:08:07.614537 systemd-logind[2508]: Removed session 15. Sep 11 18:08:07.613000 audit[3280]: AUDIT1106 pid=3280 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.614000 audit[3280]: AUDIT1104 pid=3280 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.616825 systemd[1]: sshd@12-7-10.0.0.33:22-20.61.25.254:41850.service: Deactivated successfully. Sep 11 18:08:07.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-7-10.0.0.33:22-20.61.25.254:41850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.602000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8110670a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.602000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.618211 systemd[1]: session-13.scope: Deactivated successfully. Sep 11 18:08:07.618807 systemd-logind[2508]: Session 13 logged out. Waiting for processes to exit. Sep 11 18:08:07.623647 systemd-networkd[2304]: veth5796746: Lost carrier Sep 11 18:08:07.626835 kernel: docker0: port 1(veth5796746) entered disabled state Sep 11 18:08:07.626864 kernel: veth2ed6a98: renamed from eth0 Sep 11 18:08:07.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4107-10.0.0.33:22-20.61.25.254:58242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.632598 systemd-logind[2508]: Removed session 13. Sep 11 18:08:07.633174 systemd[1]: Started sshd@20-4107-10.0.0.33:22-20.61.25.254:58242.service - OpenSSH per-connection server daemon (20.61.25.254:58242). Sep 11 18:08:07.636485 systemd[1]: Started sshd@21-4108-10.0.0.33:22-20.61.25.254:58246.service - OpenSSH per-connection server daemon (20.61.25.254:58246). Sep 11 18:08:07.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4108-10.0.0.33:22-20.61.25.254:58246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.647000 audit: BPF prog-id=78 op=UNLOAD Sep 11 18:08:07.647000 audit: BPF prog-id=84 op=UNLOAD Sep 11 18:08:07.658643 sshd[3330]: Connection closed by 20.61.25.254 port 41820 Sep 11 18:08:07.657616 sshd-session[3287]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:07.658000 audit[3287]: AUDIT1106 pid=3287 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.659000 audit[3287]: AUDIT1104 pid=3287 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-10.0.0.33:22-20.61.25.254:41820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.661970 systemd[1]: sshd@9-4101-10.0.0.33:22-20.61.25.254:41820.service: Deactivated successfully. Sep 11 18:08:07.664509 systemd[1]: session-16.scope: Deactivated successfully. Sep 11 18:08:07.665387 systemd-logind[2508]: Session 16 logged out. Waiting for processes to exit. Sep 11 18:08:07.666585 systemd-logind[2508]: Removed session 16. Sep 11 18:08:07.695000 audit[4181]: NETFILTER_CFG table=raw:55 family=2 entries=1 op=nft_unregister_rule pid=4181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.695000 audit[4181]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc706a7720 a2=0 a3=0 items=0 ppid=2991 pid=4181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.695000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E390000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.701598 systemd-networkd[2304]: veth54de61b: Link DOWN Sep 11 18:08:07.701000 audit[4183]: NETFILTER_CFG table=raw:56 family=2 entries=1 op=nft_unregister_rule pid=4183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.701000 audit[4183]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc5b7b4ee0 a2=0 a3=0 items=0 ppid=2991 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.701000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.705219 kernel: docker0: port 8(veth54de61b) entered disabled state Sep 11 18:08:07.707637 kernel: veth54de61b (unregistering): left allmulticast mode Sep 11 18:08:07.707803 kernel: veth54de61b (unregistering): left promiscuous mode Sep 11 18:08:07.707885 kernel: docker0: port 8(veth54de61b) entered disabled state Sep 11 18:08:07.700000 audit: ANOM_PROMISCUOUS dev=veth54de61b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.700000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca81157ed40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.700000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.713583 systemd-networkd[2304]: veth5796746: Link DOWN Sep 11 18:08:07.716330 kernel: docker0: port 1(veth5796746) entered disabled state Sep 11 18:08:07.716512 kernel: veth5796746 (unregistering): left allmulticast mode Sep 11 18:08:07.716597 kernel: veth5796746 (unregistering): left promiscuous mode Sep 11 18:08:07.712000 audit: ANOM_PROMISCUOUS dev=veth5796746 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.717488 kernel: docker0: port 1(veth5796746) entered disabled state Sep 11 18:08:07.712000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067940 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.712000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.749000 audit: BPF prog-id=71 op=UNLOAD Sep 11 18:08:07.749000 audit: BPF prog-id=89 op=UNLOAD Sep 11 18:08:07.757000 audit[4171]: AUDIT1101 pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.758000 audit[4172]: AUDIT1101 pid=4172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.758000 audit[4171]: AUDIT1103 pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.758000 audit[4171]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffef97fb7e0 a2=3 a3=0 items=0 ppid=1 pid=4171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.758000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:07.758000 audit[4172]: AUDIT1103 pid=4172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.759000 audit[4172]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff11e75f40 a2=3 a3=0 items=0 ppid=1 pid=4172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.759000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:07.760190 sshd-session[4171]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:07.764081 sshd[4172]: Accepted publickey for core from 20.61.25.254 port 58246 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:07.764288 sshd[4171]: Accepted publickey for core from 20.61.25.254 port 58242 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:07.760351 sshd-session[4172]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:07.765029 systemd-logind[2508]: New session '25' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:07.772179 systemd[1]: Started session-25.scope - Session 25 of User core. Sep 11 18:08:07.776000 audit[4172]: AUDIT1105 pid=4172 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.777000 audit[4171]: AUDIT1105 pid=4171 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.779000 audit[4188]: AUDIT1103 pid=4188 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.780000 audit: BPF prog-id=91 op=UNLOAD Sep 11 18:08:07.780000 audit: BPF prog-id=105 op=UNLOAD Sep 11 18:08:07.780000 audit[4187]: AUDIT1103 pid=4187 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.775047 systemd-logind[2508]: New session '24' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:07.775279 systemd[1]: Started session-24.scope - Session 24 of User core. Sep 11 18:08:07.789490 systemd[1]: docker-66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af.scope: Deactivated successfully. Sep 11 18:08:07.803459 dockerd[2991]: time="2026-09-11T18:08:07.803421868Z" level=info msg="ignoring event" container=66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:07.808896 containerd[2527]: time="2026-09-11T18:08:07.803779922Z" level=info msg="shim disconnected" id=66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af namespace=moby Sep 11 18:08:07.808896 containerd[2527]: time="2026-09-11T18:08:07.803804416Z" level=info msg="cleaning up after shim disconnected" id=66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af namespace=moby Sep 11 18:08:07.808896 containerd[2527]: time="2026-09-11T18:08:07.803810788Z" level=info msg="cleaning up dead shim" id=66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af namespace=moby Sep 11 18:08:07.851055 kernel: veth9b27991: renamed from eth0 Sep 11 18:08:07.851277 kernel: docker0: port 9(vethb0438af) entered disabled state Sep 11 18:08:07.851477 systemd-networkd[2304]: vethb0438af: Lost carrier Sep 11 18:08:07.860055 sshd[3358]: Connection closed by 20.61.25.254 port 41800 Sep 11 18:08:07.858746 sshd-session[3286]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:07.859000 audit[3286]: AUDIT1106 pid=3286 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.859000 audit[3286]: AUDIT1104 pid=3286 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10-10.0.0.33:22-20.61.25.254:41800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.863368 systemd[1]: sshd@18-10-10.0.0.33:22-20.61.25.254:41800.service: Deactivated successfully. Sep 11 18:08:07.864690 systemd[1]: session-22.scope: Deactivated successfully. Sep 11 18:08:07.865957 systemd-logind[2508]: Session 22 logged out. Waiting for processes to exit. Sep 11 18:08:07.867360 systemd-logind[2508]: Removed session 22. Sep 11 18:08:07.867000 audit[4230]: NETFILTER_CFG table=raw:57 family=2 entries=1 op=nft_unregister_rule pid=4230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:07.867000 audit[4230]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd16582cb0 a2=0 a3=0 items=0 ppid=2991 pid=4230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.867000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E31300000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:07.872644 systemd-networkd[2304]: vethb0438af: Link DOWN Sep 11 18:08:07.871000 audit: ANOM_PROMISCUOUS dev=vethb0438af prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:07.877245 kernel: docker0: port 9(vethb0438af) entered disabled state Sep 11 18:08:07.877266 kernel: vethb0438af (unregistering): left allmulticast mode Sep 11 18:08:07.877288 kernel: vethb0438af (unregistering): left promiscuous mode Sep 11 18:08:07.877402 kernel: docker0: port 9(vethb0438af) entered disabled state Sep 11 18:08:07.871000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8109e1aa0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.871000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:07.903000 audit: BPF prog-id=92 op=UNLOAD Sep 11 18:08:07.903000 audit: BPF prog-id=96 op=UNLOAD Sep 11 18:08:07.953973 containerd[2527]: time="2026-09-11T18:08:07.953937840Z" level=info msg="connecting to shim 00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e" address="unix:///run/containerd/s/4e0d7a3be304ef4307b4ea5754afb318ee328bf86dfbcfdcfd8720e665a4796e" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:07.969028 sshd[3363]: Connection closed by 20.61.25.254 port 41824 Sep 11 18:08:07.969302 systemd[1]: Started docker-00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e.scope - libcontainer container 00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e. Sep 11 18:08:07.969328 sshd-session[3285]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:07.971000 audit[3285]: AUDIT1106 pid=3285 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.971000 audit[3285]: AUDIT1104 pid=3285 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:07.974357 systemd[1]: sshd@17-4105-10.0.0.33:22-20.61.25.254:41824.service: Deactivated successfully. Sep 11 18:08:07.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4105-10.0.0.33:22-20.61.25.254:41824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:07.976699 systemd[1]: session-21.scope: Deactivated successfully. Sep 11 18:08:07.978215 systemd-logind[2508]: Session 21 logged out. Waiting for processes to exit. Sep 11 18:08:07.979300 systemd-logind[2508]: Removed session 21. Sep 11 18:08:07.980000 audit: BPF prog-id=106 op=LOAD Sep 11 18:08:07.980000 audit: BPF prog-id=107 op=LOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=194821055fd8 a2=98 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:07.980000 audit: BPF prog-id=107 op=UNLOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:07.980000 audit: BPF prog-id=108 op=LOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=194821056290 a2=98 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:07.980000 audit: BPF prog-id=109 op=LOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=194821055fe8 a2=98 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:07.980000 audit: BPF prog-id=109 op=UNLOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:07.980000 audit: BPF prog-id=108 op=UNLOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:07.980000 audit: BPF prog-id=110 op=LOAD Sep 11 18:08:07.980000 audit[4250]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1948210564f0 a2=98 a3=0 items=0 ppid=4238 pid=4250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30306239646630643033336663343264353332346537313563 Sep 11 18:08:08.003079 systemd-networkd[2304]: docker0: Gained IPv6LL Sep 11 18:08:08.006739 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:08.009759 kernel: docker0: port 1(veth77108f5) entered blocking state Sep 11 18:08:08.009802 kernel: docker0: port 1(veth77108f5) entered disabled state Sep 11 18:08:08.009821 kernel: veth77108f5: entered allmulticast mode Sep 11 18:08:08.006000 audit: ANOM_PROMISCUOUS dev=veth77108f5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.010979 kernel: veth77108f5: entered promiscuous mode Sep 11 18:08:08.006000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811d02d80 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.006000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.012000 audit[4274]: NETFILTER_CFG table=raw:58 family=2 entries=1 op=nft_register_rule pid=4274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.012000 audit[4274]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd2c1e8590 a2=0 a3=0 items=0 ppid=2991 pid=4274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.012000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.013862 systemd-networkd[2304]: veth77108f5: Link UP Sep 11 18:08:08.049021 kernel: eth0: renamed from vethd11c695 Sep 11 18:08:08.051363 kernel: docker0: port 1(veth77108f5) entered blocking state Sep 11 18:08:08.051406 kernel: docker0: port 1(veth77108f5) entered forwarding state Sep 11 18:08:08.051599 systemd-networkd[2304]: veth77108f5: Gained carrier Sep 11 18:08:08.051792 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:08.085441 dockerd[2991]: time="2026-09-11T18:08:08.085411595Z" level=info msg="sbJoin: gwep4 ''->'cb962a2cde77', gwep6 ''->''" eid=cb962a2cde77 ep=optimistic_ptolemy net=bridge nid=ad3b593e9776 Sep 11 18:08:08.110050 sshd[3353]: Connection closed by 20.61.25.254 port 41798 Sep 11 18:08:08.110440 sshd-session[3282]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.109000 audit[3282]: AUDIT1106 pid=3282 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.112024 sshd[3354]: Connection closed by 20.61.25.254 port 41846 Sep 11 18:08:08.112724 sshd[3364]: Connection closed by 20.61.25.254 port 41802 Sep 11 18:08:08.111000 audit[3282]: AUDIT1104 pid=3282 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.113058 sshd-session[3278]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-8-10.0.0.33:22-20.61.25.254:41798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.115486 sshd-session[3281]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.117216 systemd[1]: sshd@14-8-10.0.0.33:22-20.61.25.254:41798.service: Deactivated successfully. Sep 11 18:08:08.117000 audit[3278]: AUDIT1106 pid=3278 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.118000 audit[3278]: AUDIT1104 pid=3278 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.121159 sshd[3360]: Connection closed by 20.61.25.254 port 41836 Sep 11 18:08:08.121403 systemd[1]: session-19.scope: Deactivated successfully. Sep 11 18:08:08.123140 sshd-session[3283]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.126353 systemd[1]: sshd@10-4102-10.0.0.33:22-20.61.25.254:41846.service: Deactivated successfully. Sep 11 18:08:08.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-10.0.0.33:22-20.61.25.254:41846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.126645 systemd-logind[2508]: Session 19 logged out. Waiting for processes to exit. Sep 11 18:08:08.127989 systemd[1]: session-17.scope: Deactivated successfully. Sep 11 18:08:08.132045 systemd-logind[2508]: Removed session 19. Sep 11 18:08:08.134307 containerd[2527]: time="2026-09-11T18:08:08.133905739Z" level=info msg="connecting to shim 2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51" address="unix:///run/containerd/s/d4e1a20fdedd1176108034ff9963981e12a3d7457aea427dfb1378cc7009ecd1" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:08.134707 systemd-logind[2508]: Session 17 logged out. Waiting for processes to exit. Sep 11 18:08:08.135812 systemd-logind[2508]: Removed session 17. Sep 11 18:08:08.136000 audit[3283]: AUDIT1106 pid=3283 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.136000 audit[3283]: AUDIT1104 pid=3283 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.137000 audit[3281]: AUDIT1106 pid=3281 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.137000 audit[3281]: AUDIT1104 pid=3281 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.140134 containerd[2527]: time="2026-09-11T18:08:08.140111830Z" level=info msg="connecting to shim 98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076" address="unix:///run/containerd/s/a4ab540538cd470ee30c0fe3e6ade0e9ee950e0e8f184c87f470c973e233eff6" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:08.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4104-10.0.0.33:22-20.61.25.254:41836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.143405 systemd[1]: sshd@15-4104-10.0.0.33:22-20.61.25.254:41836.service: Deactivated successfully. Sep 11 18:08:08.145613 systemd[1]: sshd@13-4103-10.0.0.33:22-20.61.25.254:41802.service: Deactivated successfully. Sep 11 18:08:08.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4103-10.0.0.33:22-20.61.25.254:41802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.148307 systemd[1]: session-20.scope: Deactivated successfully. Sep 11 18:08:08.149324 systemd[1]: session-18.scope: Deactivated successfully. Sep 11 18:08:08.151209 systemd-logind[2508]: Session 18 logged out. Waiting for processes to exit. Sep 11 18:08:08.153534 systemd-logind[2508]: Removed session 18. Sep 11 18:08:08.154494 systemd-logind[2508]: Session 20 logged out. Waiting for processes to exit. Sep 11 18:08:08.155330 systemd-logind[2508]: Removed session 20. Sep 11 18:08:08.161300 systemd[1]: Started docker-2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51.scope - libcontainer container 2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51. Sep 11 18:08:08.166766 systemd[1]: Started docker-98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076.scope - libcontainer container 98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076. Sep 11 18:08:08.173000 audit: BPF prog-id=111 op=LOAD Sep 11 18:08:08.174000 audit: BPF prog-id=112 op=LOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f81f8031fd8 a2=98 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.174000 audit: BPF prog-id=112 op=UNLOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.174000 audit: BPF prog-id=113 op=LOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f81f8032290 a2=98 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.174000 audit: BPF prog-id=114 op=LOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3f81f8031fe8 a2=98 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.174000 audit: BPF prog-id=114 op=UNLOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.174000 audit: BPF prog-id=113 op=UNLOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.174000 audit: BPF prog-id=115 op=LOAD Sep 11 18:08:08.174000 audit[4323]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f81f80324f0 a2=98 a3=0 items=0 ppid=4310 pid=4323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.174000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613634306430306239373137633864313538343639353838 Sep 11 18:08:08.177000 audit: BPF prog-id=116 op=LOAD Sep 11 18:08:08.177000 audit: BPF prog-id=117 op=LOAD Sep 11 18:08:08.177000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24da3a731fd8 a2=98 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.177000 audit: BPF prog-id=117 op=UNLOAD Sep 11 18:08:08.177000 audit[4351]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.177000 audit: BPF prog-id=118 op=LOAD Sep 11 18:08:08.177000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24da3a732290 a2=98 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.178000 audit: BPF prog-id=119 op=LOAD Sep 11 18:08:08.178000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=24da3a731fe8 a2=98 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.178000 audit: BPF prog-id=119 op=UNLOAD Sep 11 18:08:08.178000 audit[4351]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.178000 audit: BPF prog-id=118 op=UNLOAD Sep 11 18:08:08.178000 audit[4351]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.178000 audit: BPF prog-id=120 op=LOAD Sep 11 18:08:08.178000 audit[4351]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24da3a7324f0 a2=98 a3=0 items=0 ppid=4311 pid=4351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39386530636163613336353832393933303363626161646561 Sep 11 18:08:08.201100 kernel: docker0: port 2(vethba77d20) entered blocking state Sep 11 18:08:08.201149 kernel: docker0: port 2(vethba77d20) entered disabled state Sep 11 18:08:08.203017 kernel: vethba77d20: entered allmulticast mode Sep 11 18:08:08.198000 audit: ANOM_PROMISCUOUS dev=vethba77d20 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.205127 kernel: vethba77d20: entered promiscuous mode Sep 11 18:08:08.198000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811cb5650 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.208000 audit[4379]: NETFILTER_CFG table=raw:59 family=2 entries=1 op=nft_register_rule pid=4379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.208000 audit[4379]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffcf39023e0 a2=0 a3=0 items=0 ppid=2991 pid=4379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.208000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.210150 systemd-networkd[2304]: vethba77d20: Link UP Sep 11 18:08:08.217029 kernel: eth0: renamed from vethc85f1c3 Sep 11 18:08:08.219140 kernel: docker0: port 2(vethba77d20) entered blocking state Sep 11 18:08:08.219174 kernel: docker0: port 2(vethba77d20) entered forwarding state Sep 11 18:08:08.222559 kernel: docker0: port 3(vethc73c8ab) entered blocking state Sep 11 18:08:08.220627 systemd-networkd[2304]: vethba77d20: Gained carrier Sep 11 18:08:08.222652 kernel: docker0: port 3(vethc73c8ab) entered disabled state Sep 11 18:08:08.223451 kernel: vethc73c8ab: entered allmulticast mode Sep 11 18:08:08.220000 audit: ANOM_PROMISCUOUS dev=vethc73c8ab prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.224406 kernel: vethc73c8ab: entered promiscuous mode Sep 11 18:08:08.220000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811cb5860 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.220000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.228000 audit[4382]: NETFILTER_CFG table=raw:60 family=2 entries=1 op=nft_register_rule pid=4382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.228000 audit[4382]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd9beb33d0 a2=0 a3=0 items=0 ppid=2991 pid=4382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.228000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.229893 systemd-networkd[2304]: vethc73c8ab: Link UP Sep 11 18:08:08.237979 dockerd[2991]: time="2026-09-11T18:08:08.237953725Z" level=info msg="sbJoin: gwep4 ''->'c93cb431999a', gwep6 ''->''" eid=c93cb431999a ep=lucid_mccarthy net=bridge nid=ad3b593e9776 Sep 11 18:08:08.240019 kernel: eth0: renamed from vethfcf1f87 Sep 11 18:08:08.245938 kernel: docker0: port 3(vethc73c8ab) entered blocking state Sep 11 18:08:08.245997 kernel: docker0: port 3(vethc73c8ab) entered forwarding state Sep 11 18:08:08.245987 systemd-networkd[2304]: vethc73c8ab: Gained carrier Sep 11 18:08:08.266913 dockerd[2991]: time="2026-09-11T18:08:08.266886017Z" level=info msg="sbJoin: gwep4 ''->'9430248e3d4b', gwep6 ''->''" eid=9430248e3d4b ep=nice_swartz net=bridge nid=ad3b593e9776 Sep 11 18:08:08.326324 systemd[1]: docker-00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e.scope: Deactivated successfully. Sep 11 18:08:08.335778 dockerd[2991]: time="2026-09-11T18:08:08.335745879Z" level=info msg="ignoring event" container=00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:08.336457 containerd[2527]: time="2026-09-11T18:08:08.336423537Z" level=info msg="shim disconnected" id=00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e namespace=moby Sep 11 18:08:08.336457 containerd[2527]: time="2026-09-11T18:08:08.336447410Z" level=info msg="cleaning up after shim disconnected" id=00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e namespace=moby Sep 11 18:08:08.336457 containerd[2527]: time="2026-09-11T18:08:08.336454993Z" level=info msg="cleaning up dead shim" id=00b9df0d033fc42d5324e715c49152a438b4fc2cdd91ef8a5d94a9d1d34ec03e namespace=moby Sep 11 18:08:08.362413 systemd-networkd[2304]: veth77108f5: Lost carrier Sep 11 18:08:08.363050 kernel: docker0: port 1(veth77108f5) entered disabled state Sep 11 18:08:08.363074 kernel: vethd11c695: renamed from eth0 Sep 11 18:08:08.375000 audit[4418]: NETFILTER_CFG table=raw:61 family=2 entries=1 op=nft_unregister_rule pid=4418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.377403 kernel: kauditd_printk_skb: 708 callbacks suppressed Sep 11 18:08:08.377437 kernel: audit: type=1325 audit(1789150088.375:531): table=raw:61 family=2 entries=1 op=nft_unregister_rule pid=4418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.375000 audit[4418]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffed1418350 a2=0 a3=0 items=0 ppid=2991 pid=4418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.383606 kernel: audit: type=1300 audit(1789150088.375:531): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffed1418350 a2=0 a3=0 items=0 ppid=2991 pid=4418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.375000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.386869 kernel: audit: type=1327 audit(1789150088.375:531): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.388700 systemd-networkd[2304]: veth77108f5: Link DOWN Sep 11 18:08:08.392177 kernel: docker0: port 1(veth77108f5) entered disabled state Sep 11 18:08:08.392235 kernel: veth77108f5 (unregistering): left allmulticast mode Sep 11 18:08:08.392254 kernel: veth77108f5 (unregistering): left promiscuous mode Sep 11 18:08:08.392268 kernel: docker0: port 1(veth77108f5) entered disabled state Sep 11 18:08:08.387000 audit: ANOM_PROMISCUOUS dev=veth77108f5 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.393865 kernel: audit: type=1700 audit(1789150088.387:532): dev=veth77108f5 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.387000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811cb7c60 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.387000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.403493 kernel: audit: type=1300 audit(1789150088.387:532): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811cb7c60 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.403595 kernel: audit: type=1327 audit(1789150088.387:532): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.412000 audit: BPF prog-id=106 op=UNLOAD Sep 11 18:08:08.412000 audit: BPF prog-id=110 op=UNLOAD Sep 11 18:08:08.415253 kernel: audit: type=1334 audit(1789150088.412:533): prog-id=106 op=UNLOAD Sep 11 18:08:08.415359 kernel: audit: type=1334 audit(1789150088.412:534): prog-id=110 op=UNLOAD Sep 11 18:08:08.425152 systemd[1]: run-docker-netns-cdbf1310a082.mount: Deactivated successfully. Sep 11 18:08:08.425217 systemd[1]: run-docker-netns-80a5532f159a.mount: Deactivated successfully. Sep 11 18:08:08.425256 systemd[1]: run-docker-netns-a14b5515b1d8.mount: Deactivated successfully. Sep 11 18:08:08.425294 systemd[1]: run-docker-netns-4b8dcf70e8d6.mount: Deactivated successfully. Sep 11 18:08:08.425333 systemd[1]: var-lib-docker-rootfs-overlayfs-dfb9bf4cca6a59e673d00c762f5367922577a651c716d819b20a9a7d3ccf549a.mount: Deactivated successfully. Sep 11 18:08:08.425376 systemd[1]: var-lib-docker-rootfs-overlayfs-66f82dd8bf4a1d60e98d2b7c260ebc0efd3198982cbef425f315cef29dbbf9af.mount: Deactivated successfully. Sep 11 18:08:08.425420 systemd[1]: var-lib-docker-rootfs-overlayfs-0e2651d60da16ab6d43da8c849f8ae04271a5fd54ee45fd830f323abbca7798f.mount: Deactivated successfully. Sep 11 18:08:08.425459 systemd[1]: var-lib-docker-rootfs-overlayfs-695f250cdeaf8ee8cc2d5f10ef6ddaf9dc8dcf13df5fb03bd239d0917aa7eaa0.mount: Deactivated successfully. Sep 11 18:08:08.476613 systemd[1]: docker-2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51.scope: Deactivated successfully. Sep 11 18:08:08.488345 dockerd[2991]: time="2026-09-11T18:08:08.488310461Z" level=info msg="ignoring event" container=2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:08.488455 containerd[2527]: time="2026-09-11T18:08:08.488339494Z" level=info msg="shim disconnected" id=2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51 namespace=moby Sep 11 18:08:08.488455 containerd[2527]: time="2026-09-11T18:08:08.488358061Z" level=info msg="cleaning up after shim disconnected" id=2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51 namespace=moby Sep 11 18:08:08.488455 containerd[2527]: time="2026-09-11T18:08:08.488365306Z" level=info msg="cleaning up dead shim" id=2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51 namespace=moby Sep 11 18:08:08.490413 systemd[1]: docker-98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076.scope: Deactivated successfully. Sep 11 18:08:08.510437 containerd[2527]: time="2026-09-11T18:08:08.510417518Z" level=info msg="shim disconnected" id=98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076 namespace=moby Sep 11 18:08:08.510586 dockerd[2991]: time="2026-09-11T18:08:08.510499722Z" level=info msg="ignoring event" container=98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:08.510623 containerd[2527]: time="2026-09-11T18:08:08.510518105Z" level=info msg="cleaning up after shim disconnected" id=98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076 namespace=moby Sep 11 18:08:08.510623 containerd[2527]: time="2026-09-11T18:08:08.510530814Z" level=info msg="cleaning up dead shim" id=98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076 namespace=moby Sep 11 18:08:08.516908 systemd-networkd[2304]: vethba77d20: Lost carrier Sep 11 18:08:08.517166 kernel: docker0: port 2(vethba77d20) entered disabled state Sep 11 18:08:08.517194 kernel: vethc85f1c3: renamed from eth0 Sep 11 18:08:08.530000 audit[4460]: NETFILTER_CFG table=raw:62 family=2 entries=1 op=nft_unregister_rule pid=4460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.530000 audit[4460]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc3a7adcc0 a2=0 a3=0 items=0 ppid=2991 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.539893 kernel: audit: type=1325 audit(1789150088.530:535): table=raw:62 family=2 entries=1 op=nft_unregister_rule pid=4460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.539934 kernel: audit: type=1300 audit(1789150088.530:535): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc3a7adcc0 a2=0 a3=0 items=0 ppid=2991 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.530000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.543568 kernel: docker0: port 3(vethc73c8ab) entered disabled state Sep 11 18:08:08.543594 sshd[4103]: Connection closed by 20.61.25.254 port 58234 Sep 11 18:08:08.543439 systemd-networkd[2304]: vethc73c8ab: Lost carrier Sep 11 18:08:08.543901 kernel: vethfcf1f87: renamed from eth0 Sep 11 18:08:08.543890 sshd-session[4060]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.543000 audit[4060]: AUDIT1106 pid=4060 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.547000 audit[4060]: AUDIT1104 pid=4060 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.550233 systemd[1]: sshd@19-4106-10.0.0.33:22-20.61.25.254:58234.service: Deactivated successfully. Sep 11 18:08:08.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4106-10.0.0.33:22-20.61.25.254:58234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.552079 kernel: docker0: port 2(vethba77d20) entered disabled state Sep 11 18:08:08.547000 audit: ANOM_PROMISCUOUS dev=vethba77d20 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.553908 systemd[1]: session-23.scope: Deactivated successfully. Sep 11 18:08:08.555698 kernel: vethba77d20 (unregistering): left allmulticast mode Sep 11 18:08:08.555722 kernel: vethba77d20 (unregistering): left promiscuous mode Sep 11 18:08:08.555745 kernel: docker0: port 2(vethba77d20) entered disabled state Sep 11 18:08:08.556259 systemd-logind[2508]: Session 23 logged out. Waiting for processes to exit. Sep 11 18:08:08.559151 systemd-networkd[2304]: vethba77d20: Link DOWN Sep 11 18:08:08.559558 systemd-logind[2508]: Removed session 23. Sep 11 18:08:08.559000 audit[4466]: NETFILTER_CFG table=raw:63 family=2 entries=1 op=nft_unregister_rule pid=4466 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:08.559000 audit[4466]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe0ea5b4c0 a2=0 a3=0 items=0 ppid=2991 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.559000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:08.547000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f766c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.547000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.564766 systemd-networkd[2304]: vethc73c8ab: Link DOWN Sep 11 18:08:08.567078 kernel: docker0: port 3(vethc73c8ab) entered disabled state Sep 11 18:08:08.563000 audit: ANOM_PROMISCUOUS dev=vethc73c8ab prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:08.571092 kernel: vethc73c8ab (unregistering): left allmulticast mode Sep 11 18:08:08.571114 kernel: vethc73c8ab (unregistering): left promiscuous mode Sep 11 18:08:08.571131 kernel: docker0: port 3(vethc73c8ab) entered disabled state Sep 11 18:08:08.574325 systemd[1]: run-docker-netns-6c344efc4fe0.mount: Deactivated successfully. Sep 11 18:08:08.577852 systemd[1]: var-lib-docker-rootfs-overlayfs-2a640d00b9717c8d158469588830d90da48b57942f19d2d5557749a5d760fe51.mount: Deactivated successfully. Sep 11 18:08:08.563000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffe540 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.563000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:08.589000 audit: BPF prog-id=111 op=UNLOAD Sep 11 18:08:08.589000 audit: BPF prog-id=115 op=UNLOAD Sep 11 18:08:08.625061 systemd[1]: run-docker-netns-0708833cef95.mount: Deactivated successfully. Sep 11 18:08:08.632086 systemd[1]: var-lib-docker-rootfs-overlayfs-98e0caca3658299303cbaadeaeaec0a2662c212171ece6069361ec726eb61076.mount: Deactivated successfully. Sep 11 18:08:08.636000 audit: BPF prog-id=116 op=UNLOAD Sep 11 18:08:08.636000 audit: BPF prog-id=120 op=UNLOAD Sep 11 18:08:08.709312 sshd[4187]: Connection closed by 20.61.25.254 port 58246 Sep 11 18:08:08.709709 sshd-session[4172]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.709000 audit[4172]: AUDIT1106 pid=4172 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.709000 audit[4172]: AUDIT1104 pid=4172 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.712056 systemd[1]: sshd@21-4108-10.0.0.33:22-20.61.25.254:58246.service: Deactivated successfully. Sep 11 18:08:08.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4108-10.0.0.33:22-20.61.25.254:58246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.713386 systemd[1]: session-25.scope: Deactivated successfully. Sep 11 18:08:08.714098 systemd-logind[2508]: Session 25 logged out. Waiting for processes to exit. Sep 11 18:08:08.715259 systemd-logind[2508]: Removed session 25. Sep 11 18:08:08.719417 sshd[4188]: Connection closed by 20.61.25.254 port 58242 Sep 11 18:08:08.720878 sshd-session[4171]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:08.720000 audit[4171]: AUDIT1106 pid=4171 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.720000 audit[4171]: AUDIT1104 pid=4171 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.723067 systemd[1]: sshd@20-4107-10.0.0.33:22-20.61.25.254:58242.service: Deactivated successfully. Sep 11 18:08:08.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4107-10.0.0.33:22-20.61.25.254:58242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.724351 systemd[1]: session-24.scope: Deactivated successfully. Sep 11 18:08:08.725050 systemd-logind[2508]: Session 24 logged out. Waiting for processes to exit. Sep 11 18:08:08.725951 systemd-logind[2508]: Removed session 24. Sep 11 18:08:08.765297 systemd[1]: Started sshd@22-11-10.0.0.33:22-20.61.25.254:58258.service - OpenSSH per-connection server daemon (20.61.25.254:58258). Sep 11 18:08:08.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-11-10.0.0.33:22-20.61.25.254:58258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.869000 audit[4474]: AUDIT1101 pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.870998 sshd[4474]: Accepted publickey for core from 20.61.25.254 port 58258 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:08.870000 audit[4474]: AUDIT1103 pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.870000 audit[4474]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffddc3843a0 a2=3 a3=0 items=0 ppid=1 pid=4474 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:08.870000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:08.871894 sshd-session[4474]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:08.875942 systemd-logind[2508]: New session '26' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:08.884161 systemd[1]: Started session-26.scope - Session 26 of User core. Sep 11 18:08:08.884000 audit[4474]: AUDIT1105 pid=4474 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.885000 audit[4478]: AUDIT1103 pid=4478 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:08.907000 audit[4483]: AUDIT1101 pid=4483 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.908739 sudo[4483]: core : PWD=/tmp/tmp.CjokNoYxaj ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/sh /usr/bin/ping Sep 11 18:08:08.908949 sudo[4483]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:08:08.907000 audit[4483]: AUDIT1110 pid=4483 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.907000 audit[4483]: AUDIT1105 pid=4483 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.931069 sudo[4483]: pam_unix(sudo:session): session closed for user root Sep 11 18:08:08.930000 audit[4483]: AUDIT1106 pid=4483 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.930000 audit[4483]: AUDIT1104 pid=4483 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.934000 audit[4496]: AUDIT1101 pid=4496 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.935659 sudo[4496]: core : PWD=/tmp/tmp.CjokNoYxaj ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/sh /usr/bin/ping /lib64/ld-linux-x86-64.so.2 /lib64/libc.so.6 /lib64/libcap.so.2 /lib64/libreadline.so.8 /lib64/libtinfo.so.6 /lib64/libtinfow.so.6 ./ Sep 11 18:08:08.934000 audit[4496]: AUDIT1110 pid=4496 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.934000 audit[4496]: AUDIT1105 pid=4496 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.935875 sudo[4496]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:08:08.986773 sudo[4496]: pam_unix(sudo:session): session closed for user root Sep 11 18:08:08.985000 audit[4496]: AUDIT1106 pid=4496 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.985000 audit[4496]: AUDIT1104 pid=4496 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.990000 audit[4479]: AUDIT1101 pid=4479 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.991266 sudo[4479]: core : PWD=/tmp/tmp.CjokNoYxaj ; USER=root ; COMMAND=/usr/sbin/docker build -t ping . Sep 11 18:08:08.991489 sudo[4479]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:08:08.990000 audit[4479]: AUDIT1110 pid=4479 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:08.990000 audit[4479]: AUDIT1105 pid=4479 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:09.353209 dockerd[2991]: time="2026-09-11T18:08:09.353079899Z" level=warning msg="forcibly turning on oci-mediatype mode for attestations" span="exporting to image" spanID=7ace6948ac39952c traceID=07484f0d62db8358698e24d4dd83bdf1 Sep 11 18:08:09.539318 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:09.636071 systemd[1]: tmp-containerd\x2dmount3723968571.mount: Deactivated successfully. Sep 11 18:08:09.874696 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount37722850.mount: Deactivated successfully. Sep 11 18:08:10.019000 audit[4479]: AUDIT1106 pid=4479 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:10.019000 audit[4479]: AUDIT1104 pid=4479 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:08:10.020384 sudo[4479]: pam_unix(sudo:session): session closed for user root Sep 11 18:08:10.034996 sshd[4478]: Connection closed by 20.61.25.254 port 58258 Sep 11 18:08:10.036285 sshd-session[4474]: pam_unix(sshd:session): session closed for user core Sep 11 18:08:10.035000 audit[4474]: AUDIT1106 pid=4474 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:10.035000 audit[4474]: AUDIT1104 pid=4474 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:10.038512 systemd[1]: sshd@22-11-10.0.0.33:22-20.61.25.254:58258.service: Deactivated successfully. Sep 11 18:08:10.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-11-10.0.0.33:22-20.61.25.254:58258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:10.039916 systemd[1]: session-26.scope: Deactivated successfully. Sep 11 18:08:10.040601 systemd-logind[2508]: Session 26 logged out. Waiting for processes to exit. Sep 11 18:08:10.041571 systemd-logind[2508]: Removed session 26. Sep 11 18:08:10.060000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4109-10.0.0.33:22-20.61.25.254:58266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:10.061585 systemd[1]: Started sshd@23-4109-10.0.0.33:22-20.61.25.254:58266.service - OpenSSH per-connection server daemon (20.61.25.254:58266). Sep 11 18:08:10.167000 audit[4546]: AUDIT1101 pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:10.168968 sshd[4546]: Accepted publickey for core from 20.61.25.254 port 58266 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:08:10.168000 audit[4546]: AUDIT1103 pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:10.168000 audit[4546]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc5fb6cd00 a2=3 a3=0 items=0 ppid=1 pid=4546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.168000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:08:10.169902 sshd-session[4546]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:08:10.174559 systemd-logind[2508]: New session '27' of user 'core' with class 'user' and type 'tty'. Sep 11 18:08:10.180141 systemd[1]: Started session-27.scope - Session 27 of User core. Sep 11 18:08:10.180000 audit[4546]: AUDIT1105 pid=4546 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:10.182000 audit[4550]: AUDIT1103 pid=4550 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:08:10.403364 containerd[2527]: time="2026-09-11T18:08:10.403323540Z" level=info msg="connecting to shim f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5" address="unix:///run/containerd/s/3675a1dba09db97649508bf17c13007bbe3c2eb5cec6c32b869e5d6dfd2a847e" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:10.427153 systemd[1]: Started docker-f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5.scope - libcontainer container f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5. Sep 11 18:08:10.438000 audit: BPF prog-id=121 op=LOAD Sep 11 18:08:10.438000 audit: BPF prog-id=122 op=LOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=34966cc43fd8 a2=98 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.438000 audit: BPF prog-id=122 op=UNLOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.438000 audit: BPF prog-id=123 op=LOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=34966cc44290 a2=98 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.438000 audit: BPF prog-id=124 op=LOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=34966cc43fe8 a2=98 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.438000 audit: BPF prog-id=124 op=UNLOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.438000 audit: BPF prog-id=123 op=UNLOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.438000 audit: BPF prog-id=125 op=LOAD Sep 11 18:08:10.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=34966cc444f0 a2=98 a3=0 items=0 ppid=4569 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366239656535326632396436636234306366303532323865 Sep 11 18:08:10.465516 kernel: docker0: port 1(veth9567913) entered blocking state Sep 11 18:08:10.465584 kernel: docker0: port 1(veth9567913) entered disabled state Sep 11 18:08:10.466747 kernel: veth9567913: entered allmulticast mode Sep 11 18:08:10.462000 audit: ANOM_PROMISCUOUS dev=veth9567913 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:10.468039 kernel: veth9567913: entered promiscuous mode Sep 11 18:08:10.462000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120765a0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.462000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:10.469000 audit[4599]: NETFILTER_CFG table=raw:64 family=2 entries=1 op=nft_register_rule pid=4599 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:10.469000 audit[4599]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffcd978c330 a2=0 a3=0 items=0 ppid=2991 pid=4599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:10.469000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:10.470881 systemd-networkd[2304]: veth9567913: Link UP Sep 11 18:08:10.483042 kernel: eth0: renamed from vethcd29fba Sep 11 18:08:10.486680 kernel: docker0: port 1(veth9567913) entered blocking state Sep 11 18:08:10.486540 systemd-networkd[2304]: veth9567913: Gained carrier Sep 11 18:08:10.486786 kernel: docker0: port 1(veth9567913) entered forwarding state Sep 11 18:08:10.487238 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:10.497073 dockerd[2991]: time="2026-09-11T18:08:10.497044597Z" level=info msg="sbJoin: gwep4 ''->'9ff399e15e13', gwep6 ''->''" eid=9ff399e15e13 ep=exciting_bartik net=bridge nid=ad3b593e9776 Sep 11 18:08:11.520230 systemd[1]: docker-f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5.scope: Deactivated successfully. Sep 11 18:08:11.534459 dockerd[2991]: time="2026-09-11T18:08:11.534420244Z" level=info msg="ignoring event" container=f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:11.534940 containerd[2527]: time="2026-09-11T18:08:11.534436697Z" level=info msg="shim disconnected" id=f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5 namespace=moby Sep 11 18:08:11.534940 containerd[2527]: time="2026-09-11T18:08:11.534767082Z" level=info msg="cleaning up after shim disconnected" id=f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5 namespace=moby Sep 11 18:08:11.534940 containerd[2527]: time="2026-09-11T18:08:11.534776867Z" level=info msg="cleaning up dead shim" id=f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5 namespace=moby Sep 11 18:08:11.558804 systemd-networkd[2304]: veth9567913: Lost carrier Sep 11 18:08:11.559523 kernel: docker0: port 1(veth9567913) entered disabled state Sep 11 18:08:11.559557 kernel: vethcd29fba: renamed from eth0 Sep 11 18:08:11.573000 audit[4631]: NETFILTER_CFG table=raw:65 family=2 entries=1 op=nft_unregister_rule pid=4631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:11.573000 audit[4631]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff64844110 a2=0 a3=0 items=0 ppid=2991 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.573000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:11.584458 systemd-networkd[2304]: veth9567913: Link DOWN Sep 11 18:08:11.588869 kernel: docker0: port 1(veth9567913) entered disabled state Sep 11 18:08:11.583000 audit: ANOM_PROMISCUOUS dev=veth9567913 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:11.589055 kernel: veth9567913 (unregistering): left allmulticast mode Sep 11 18:08:11.589079 kernel: veth9567913 (unregistering): left promiscuous mode Sep 11 18:08:11.589113 kernel: docker0: port 1(veth9567913) entered disabled state Sep 11 18:08:11.583000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4ed00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:11.600912 systemd[1]: run-docker-netns-2ef937e751c4.mount: Deactivated successfully. Sep 11 18:08:11.606422 systemd[1]: var-lib-docker-rootfs-overlayfs-f6b9ee52f29d6cb40cf05228e9a122707a11958c772097753d046e2fc1a7a6c5.mount: Deactivated successfully. Sep 11 18:08:11.612000 audit: BPF prog-id=121 op=UNLOAD Sep 11 18:08:11.612000 audit: BPF prog-id=125 op=UNLOAD Sep 11 18:08:11.749432 systemd[1]: tmp-containerd\x2dmount4267805078.mount: Deactivated successfully. Sep 11 18:08:11.843230 containerd[2527]: time="2026-09-11T18:08:11.843135531Z" level=info msg="connecting to shim 4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9" address="unix:///run/containerd/s/826b9644c1ba23809bd840e5060cc1aba82671ec7ef63dbc11641a9bc9bb7fbb" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:11.863178 systemd[1]: Started docker-4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9.scope - libcontainer container 4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9. Sep 11 18:08:11.870000 audit: BPF prog-id=126 op=LOAD Sep 11 18:08:11.871000 audit: BPF prog-id=127 op=LOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24788a4a3fd8 a2=98 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.871000 audit: BPF prog-id=127 op=UNLOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.871000 audit: BPF prog-id=128 op=LOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24788a4a4290 a2=98 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.871000 audit: BPF prog-id=129 op=LOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=24788a4a3fe8 a2=98 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.871000 audit: BPF prog-id=129 op=UNLOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.871000 audit: BPF prog-id=128 op=UNLOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.871000 audit: BPF prog-id=130 op=LOAD Sep 11 18:08:11.871000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24788a4a44f0 a2=98 a3=0 items=0 ppid=4649 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34626338626432663831653236383735343932346365663438 Sep 11 18:08:11.893154 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:11.894281 kernel: docker0: port 1(veth6535d44) entered blocking state Sep 11 18:08:11.894314 kernel: docker0: port 1(veth6535d44) entered disabled state Sep 11 18:08:11.895109 kernel: veth6535d44: entered allmulticast mode Sep 11 18:08:11.891000 audit: ANOM_PROMISCUOUS dev=veth6535d44 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:11.896046 kernel: veth6535d44: entered promiscuous mode Sep 11 18:08:11.891000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812076750 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.891000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:11.897000 audit[4682]: NETFILTER_CFG table=raw:66 family=2 entries=1 op=nft_register_rule pid=4682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:11.897000 audit[4682]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd99f38c50 a2=0 a3=0 items=0 ppid=2991 pid=4682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:11.897000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:11.898695 systemd-networkd[2304]: veth6535d44: Link UP Sep 11 18:08:11.908523 kernel: eth0: renamed from vethdb0e787 Sep 11 18:08:11.908570 kernel: docker0: port 1(veth6535d44) entered blocking state Sep 11 18:08:11.908582 kernel: docker0: port 1(veth6535d44) entered forwarding state Sep 11 18:08:11.908677 systemd-networkd[2304]: veth6535d44: Gained carrier Sep 11 18:08:11.909171 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:11.917175 dockerd[2991]: time="2026-09-11T18:08:11.917143931Z" level=info msg="sbJoin: gwep4 ''->'dd873a1b586d', gwep6 ''->''" eid=dd873a1b586d ep=crazy_johnson net=bridge nid=ad3b593e9776 Sep 11 18:08:12.470798 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Sep 11 18:08:12.940464 systemd[1]: docker-4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9.scope: Deactivated successfully. Sep 11 18:08:12.953341 containerd[2527]: time="2026-09-11T18:08:12.953293027Z" level=info msg="shim disconnected" id=4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9 namespace=moby Sep 11 18:08:12.953341 containerd[2527]: time="2026-09-11T18:08:12.953333631Z" level=info msg="cleaning up after shim disconnected" id=4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9 namespace=moby Sep 11 18:08:12.953341 containerd[2527]: time="2026-09-11T18:08:12.953343146Z" level=info msg="cleaning up dead shim" id=4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9 namespace=moby Sep 11 18:08:12.953670 dockerd[2991]: time="2026-09-11T18:08:12.953182572Z" level=info msg="ignoring event" container=4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:12.982887 systemd-networkd[2304]: veth6535d44: Lost carrier Sep 11 18:08:12.983714 kernel: docker0: port 1(veth6535d44) entered disabled state Sep 11 18:08:12.983738 kernel: vethdb0e787: renamed from eth0 Sep 11 18:08:13.021000 audit[4714]: NETFILTER_CFG table=raw:67 family=2 entries=1 op=nft_unregister_rule pid=4714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:13.021000 audit[4714]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe44fa0ac0 a2=0 a3=0 items=0 ppid=2991 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.021000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:13.030400 systemd-networkd[2304]: veth6535d44: Link DOWN Sep 11 18:08:13.032287 kernel: docker0: port 1(veth6535d44) entered disabled state Sep 11 18:08:13.029000 audit: ANOM_PROMISCUOUS dev=veth6535d44 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:13.035451 kernel: veth6535d44 (unregistering): left allmulticast mode Sep 11 18:08:13.035476 kernel: veth6535d44 (unregistering): left promiscuous mode Sep 11 18:08:13.035492 kernel: docker0: port 1(veth6535d44) entered disabled state Sep 11 18:08:13.029000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f300 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.029000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:13.046027 systemd[1]: run-docker-netns-0167d0b5c925.mount: Deactivated successfully. Sep 11 18:08:13.051600 systemd[1]: var-lib-docker-rootfs-overlayfs-4bc8bd2f81e268754924cef4855349527b873933895893d6c1d7d636c65789f9.mount: Deactivated successfully. Sep 11 18:08:13.060000 audit: BPF prog-id=126 op=UNLOAD Sep 11 18:08:13.060000 audit: BPF prog-id=130 op=UNLOAD Sep 11 18:08:13.176177 systemd[1]: tmp-containerd\x2dmount2577971811.mount: Deactivated successfully. Sep 11 18:08:13.244904 containerd[2527]: time="2026-09-11T18:08:13.244461298Z" level=info msg="connecting to shim 4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527" address="unix:///run/containerd/s/48cbc915049bfbc8b29cc96524c4704bf59c23a19ef54ba1ca657ffb06fb1858" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:13.268174 systemd[1]: Started docker-4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527.scope - libcontainer container 4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527. Sep 11 18:08:13.276000 audit: BPF prog-id=131 op=LOAD Sep 11 18:08:13.276000 audit: BPF prog-id=132 op=LOAD Sep 11 18:08:13.276000 audit[4742]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=367a24439fd8 a2=98 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.276000 audit: BPF prog-id=132 op=UNLOAD Sep 11 18:08:13.276000 audit[4742]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.277000 audit: BPF prog-id=133 op=LOAD Sep 11 18:08:13.277000 audit[4742]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=367a2443a290 a2=98 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.277000 audit: BPF prog-id=134 op=LOAD Sep 11 18:08:13.277000 audit[4742]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=367a24439fe8 a2=98 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.277000 audit: BPF prog-id=134 op=UNLOAD Sep 11 18:08:13.277000 audit[4742]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.277000 audit: BPF prog-id=133 op=UNLOAD Sep 11 18:08:13.277000 audit[4742]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.277000 audit: BPF prog-id=135 op=LOAD Sep 11 18:08:13.277000 audit[4742]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=367a2443a4f0 a2=98 a3=0 items=0 ppid=4731 pid=4742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653332333465303264643830396535623730333937366139 Sep 11 18:08:13.302356 kernel: docker0: port 1(veth507fa9b) entered blocking state Sep 11 18:08:13.301935 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:13.302480 kernel: docker0: port 1(veth507fa9b) entered disabled state Sep 11 18:08:13.299000 audit: ANOM_PROMISCUOUS dev=veth507fa9b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:13.304250 kernel: veth507fa9b: entered allmulticast mode Sep 11 18:08:13.304273 kernel: veth507fa9b: entered promiscuous mode Sep 11 18:08:13.299000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e7830 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.299000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:13.308000 audit[4763]: NETFILTER_CFG table=raw:68 family=2 entries=1 op=nft_register_rule pid=4763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:13.308000 audit[4763]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd6a0d3730 a2=0 a3=0 items=0 ppid=2991 pid=4763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:13.308000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:13.309528 systemd-networkd[2304]: veth507fa9b: Link UP Sep 11 18:08:13.323880 kernel: eth0: renamed from veth5d84483 Sep 11 18:08:13.323934 kernel: docker0: port 1(veth507fa9b) entered blocking state Sep 11 18:08:13.324023 kernel: docker0: port 1(veth507fa9b) entered forwarding state Sep 11 18:08:13.323951 systemd-networkd[2304]: veth507fa9b: Gained carrier Sep 11 18:08:13.324332 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:13.333369 dockerd[2991]: time="2026-09-11T18:08:13.333340225Z" level=info msg="sbJoin: gwep4 ''->'816e2e8b517b', gwep6 ''->''" eid=816e2e8b517b ep=elegant_goodall net=bridge nid=ad3b593e9776 Sep 11 18:08:14.356710 systemd[1]: docker-4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527.scope: Deactivated successfully. Sep 11 18:08:14.370020 dockerd[2991]: time="2026-09-11T18:08:14.369614839Z" level=info msg="ignoring event" container=4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:14.370773 containerd[2527]: time="2026-09-11T18:08:14.370726681Z" level=info msg="shim disconnected" id=4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527 namespace=moby Sep 11 18:08:14.370773 containerd[2527]: time="2026-09-11T18:08:14.370764207Z" level=info msg="cleaning up after shim disconnected" id=4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527 namespace=moby Sep 11 18:08:14.370773 containerd[2527]: time="2026-09-11T18:08:14.370772216Z" level=info msg="cleaning up dead shim" id=4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527 namespace=moby Sep 11 18:08:14.393322 systemd-networkd[2304]: veth507fa9b: Lost carrier Sep 11 18:08:14.394024 kernel: docker0: port 1(veth507fa9b) entered disabled state Sep 11 18:08:14.394077 kernel: veth5d84483: renamed from eth0 Sep 11 18:08:14.414000 audit[4794]: NETFILTER_CFG table=raw:69 family=2 entries=1 op=nft_unregister_rule pid=4794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:14.416559 kernel: kauditd_printk_skb: 157 callbacks suppressed Sep 11 18:08:14.416670 kernel: audit: type=1325 audit(1789150094.414:620): table=raw:69 family=2 entries=1 op=nft_unregister_rule pid=4794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:14.414000 audit[4794]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff9290fe00 a2=0 a3=0 items=0 ppid=2991 pid=4794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.422435 kernel: audit: type=1300 audit(1789150094.414:620): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff9290fe00 a2=0 a3=0 items=0 ppid=2991 pid=4794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.414000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:14.424654 kernel: audit: type=1327 audit(1789150094.414:620): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:14.426839 systemd-networkd[2304]: veth507fa9b: Link DOWN Sep 11 18:08:14.429575 kernel: docker0: port 1(veth507fa9b) entered disabled state Sep 11 18:08:14.429680 kernel: veth507fa9b (unregistering): left allmulticast mode Sep 11 18:08:14.430442 kernel: veth507fa9b (unregistering): left promiscuous mode Sep 11 18:08:14.425000 audit: ANOM_PROMISCUOUS dev=veth507fa9b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:14.433099 kernel: docker0: port 1(veth507fa9b) entered disabled state Sep 11 18:08:14.433123 kernel: audit: type=1700 audit(1789150094.425:621): dev=veth507fa9b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:14.425000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f768a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.425000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:14.443922 systemd[1]: run-docker-netns-5f54f3755fa8.mount: Deactivated successfully. Sep 11 18:08:14.446847 kernel: audit: type=1300 audit(1789150094.425:621): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f768a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.446880 kernel: audit: type=1327 audit(1789150094.425:621): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:14.452102 systemd[1]: var-lib-docker-rootfs-overlayfs-4e3234e02dd809e5b703976a98bc8c1b867ec51b55654aca3f6f6bc9d6669527.mount: Deactivated successfully. Sep 11 18:08:14.457000 audit: BPF prog-id=131 op=UNLOAD Sep 11 18:08:14.457000 audit: BPF prog-id=135 op=UNLOAD Sep 11 18:08:14.462790 kernel: audit: type=1334 audit(1789150094.457:622): prog-id=131 op=UNLOAD Sep 11 18:08:14.462854 kernel: audit: type=1334 audit(1789150094.457:623): prog-id=135 op=UNLOAD Sep 11 18:08:14.577338 systemd[1]: tmp-containerd\x2dmount4221494653.mount: Deactivated successfully. Sep 11 18:08:14.647050 containerd[2527]: time="2026-09-11T18:08:14.646798923Z" level=info msg="connecting to shim b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802" address="unix:///run/containerd/s/9c22bc4f6e62a892a94eed8e3f29e7a900e410792be9ba3e0ee9b2b648553e42" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:14.670183 systemd[1]: Started docker-b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802.scope - libcontainer container b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802. Sep 11 18:08:14.677000 audit: BPF prog-id=136 op=LOAD Sep 11 18:08:14.679000 audit: BPF prog-id=137 op=LOAD Sep 11 18:08:14.681448 kernel: audit: type=1334 audit(1789150094.677:624): prog-id=136 op=LOAD Sep 11 18:08:14.681484 kernel: audit: type=1334 audit(1789150094.679:625): prog-id=137 op=LOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=394367e37fd8 a2=98 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.679000 audit: BPF prog-id=137 op=UNLOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.679000 audit: BPF prog-id=138 op=LOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=394367e38290 a2=98 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.679000 audit: BPF prog-id=139 op=LOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=394367e37fe8 a2=98 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.679000 audit: BPF prog-id=139 op=UNLOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.679000 audit: BPF prog-id=138 op=UNLOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.679000 audit: BPF prog-id=140 op=LOAD Sep 11 18:08:14.679000 audit[4822]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=394367e384f0 a2=98 a3=0 items=0 ppid=4812 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363561663731656232646439623965306132376165646464 Sep 11 18:08:14.704053 kernel: docker0: port 1(veth11da404) entered blocking state Sep 11 18:08:14.704105 kernel: docker0: port 1(veth11da404) entered disabled state Sep 11 18:08:14.706373 kernel: veth11da404: entered allmulticast mode Sep 11 18:08:14.706468 kernel: veth11da404: entered promiscuous mode Sep 11 18:08:14.701000 audit: ANOM_PROMISCUOUS dev=veth11da404 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:14.701000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111ce480 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.701000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:14.707958 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:14.708000 audit[4843]: NETFILTER_CFG table=raw:70 family=2 entries=1 op=nft_register_rule pid=4843 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:14.708000 audit[4843]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe5d5817a0 a2=0 a3=0 items=0 ppid=2991 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:14.708000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:14.710546 systemd-networkd[2304]: veth11da404: Link UP Sep 11 18:08:14.723025 kernel: eth0: renamed from veth7040a06 Sep 11 18:08:14.723091 kernel: docker0: port 1(veth11da404) entered blocking state Sep 11 18:08:14.725075 kernel: docker0: port 1(veth11da404) entered forwarding state Sep 11 18:08:14.725129 systemd-networkd[2304]: veth11da404: Gained carrier Sep 11 18:08:14.725572 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:14.738026 dockerd[2991]: time="2026-09-11T18:08:14.736514853Z" level=info msg="sbJoin: gwep4 ''->'d7f876ced22d', gwep6 ''->''" eid=d7f876ced22d ep=stupefied_grothendieck net=bridge nid=ad3b593e9776 Sep 11 18:08:15.761644 systemd[1]: docker-b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802.scope: Deactivated successfully. Sep 11 18:08:15.775111 dockerd[2991]: time="2026-09-11T18:08:15.775072920Z" level=info msg="ignoring event" container=b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:15.775481 containerd[2527]: time="2026-09-11T18:08:15.775414908Z" level=info msg="shim disconnected" id=b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802 namespace=moby Sep 11 18:08:15.775481 containerd[2527]: time="2026-09-11T18:08:15.775456961Z" level=info msg="cleaning up after shim disconnected" id=b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802 namespace=moby Sep 11 18:08:15.775481 containerd[2527]: time="2026-09-11T18:08:15.775473163Z" level=info msg="cleaning up dead shim" id=b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802 namespace=moby Sep 11 18:08:15.802266 kernel: docker0: port 1(veth11da404) entered disabled state Sep 11 18:08:15.802055 systemd-networkd[2304]: veth11da404: Lost carrier Sep 11 18:08:15.804059 kernel: veth7040a06: renamed from eth0 Sep 11 18:08:15.820000 audit[4877]: NETFILTER_CFG table=raw:71 family=2 entries=1 op=nft_unregister_rule pid=4877 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:15.820000 audit[4877]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc4b89ed80 a2=0 a3=0 items=0 ppid=2991 pid=4877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:15.820000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:15.827761 systemd-networkd[2304]: veth11da404: Link DOWN Sep 11 18:08:15.829025 kernel: docker0: port 1(veth11da404) entered disabled state Sep 11 18:08:15.826000 audit: ANOM_PROMISCUOUS dev=veth11da404 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:15.832541 kernel: veth11da404 (unregistering): left allmulticast mode Sep 11 18:08:15.832565 kernel: veth11da404 (unregistering): left promiscuous mode Sep 11 18:08:15.832584 kernel: docker0: port 1(veth11da404) entered disabled state Sep 11 18:08:15.826000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8b580 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:15.826000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:15.843769 systemd[1]: run-docker-netns-1e1b8cf5e277.mount: Deactivated successfully. Sep 11 18:08:15.848828 systemd[1]: var-lib-docker-rootfs-overlayfs-b65af71eb2dd9b9e0a27aeddd87235033852d6a98eca64e6093a0a4850936802.mount: Deactivated successfully. Sep 11 18:08:15.853000 audit: BPF prog-id=136 op=UNLOAD Sep 11 18:08:15.853000 audit: BPF prog-id=140 op=UNLOAD Sep 11 18:08:16.098941 containerd[2527]: time="2026-09-11T18:08:16.098526707Z" level=info msg="connecting to shim c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d" address="unix:///run/containerd/s/e81f972ae529df87e191fc96ca1e98da9bd873ec59e87e98f61ecc8fe5b5f9c0" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:16.121173 systemd[1]: Started docker-c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d.scope - libcontainer container c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d. Sep 11 18:08:16.129000 audit: BPF prog-id=141 op=LOAD Sep 11 18:08:16.129000 audit: BPF prog-id=142 op=LOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2e669ccd9fd8 a2=98 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.129000 audit: BPF prog-id=142 op=UNLOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.129000 audit: BPF prog-id=143 op=LOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2e669ccda290 a2=98 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.129000 audit: BPF prog-id=144 op=LOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2e669ccd9fe8 a2=98 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.129000 audit: BPF prog-id=144 op=UNLOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.129000 audit: BPF prog-id=143 op=UNLOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.129000 audit: BPF prog-id=145 op=LOAD Sep 11 18:08:16.129000 audit[4905]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2e669ccda4f0 a2=98 a3=0 items=0 ppid=4894 pid=4905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303732363530663637333835346637663634633835303036 Sep 11 18:08:16.152281 kernel: docker0: port 1(vethe86d367) entered blocking state Sep 11 18:08:16.152202 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:16.152418 kernel: docker0: port 1(vethe86d367) entered disabled state Sep 11 18:08:16.154232 kernel: vethe86d367: entered allmulticast mode Sep 11 18:08:16.149000 audit: ANOM_PROMISCUOUS dev=vethe86d367 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:16.155802 kernel: vethe86d367: entered promiscuous mode Sep 11 18:08:16.149000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c897d0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:16.157000 audit[4925]: NETFILTER_CFG table=raw:72 family=2 entries=1 op=nft_register_rule pid=4925 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:16.157000 audit[4925]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe68459ea0 a2=0 a3=0 items=0 ppid=2991 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:16.157000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:16.159503 systemd-networkd[2304]: vethe86d367: Link UP Sep 11 18:08:16.167022 kernel: eth0: renamed from veth1984225 Sep 11 18:08:16.167075 kernel: docker0: port 1(vethe86d367) entered blocking state Sep 11 18:08:16.168767 kernel: docker0: port 1(vethe86d367) entered forwarding state Sep 11 18:08:16.168839 systemd-networkd[2304]: vethe86d367: Gained carrier Sep 11 18:08:16.169166 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:16.176954 dockerd[2991]: time="2026-09-11T18:08:16.176928672Z" level=info msg="sbJoin: gwep4 ''->'cd50a283a532', gwep6 ''->''" eid=cd50a283a532 ep=confident_meitner net=bridge nid=ad3b593e9776 Sep 11 18:08:17.053033 update_engine[2509]: I20260911 18:08:17.052960 2509 update_attempter.cc:509] Updating boot flags... Sep 11 18:08:17.199614 systemd[1]: docker-c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d.scope: Deactivated successfully. Sep 11 18:08:17.248451 dockerd[2991]: time="2026-09-11T18:08:17.248405254Z" level=info msg="ignoring event" container=c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:17.248979 containerd[2527]: time="2026-09-11T18:08:17.248815612Z" level=info msg="shim disconnected" id=c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d namespace=moby Sep 11 18:08:17.248979 containerd[2527]: time="2026-09-11T18:08:17.248847952Z" level=info msg="cleaning up after shim disconnected" id=c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d namespace=moby Sep 11 18:08:17.248979 containerd[2527]: time="2026-09-11T18:08:17.248856493Z" level=info msg="cleaning up dead shim" id=c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d namespace=moby Sep 11 18:08:17.287702 systemd-networkd[2304]: vethe86d367: Lost carrier Sep 11 18:08:17.288551 kernel: docker0: port 1(vethe86d367) entered disabled state Sep 11 18:08:17.288577 kernel: veth1984225: renamed from eth0 Sep 11 18:08:17.305000 audit[5000]: NETFILTER_CFG table=raw:73 family=2 entries=1 op=nft_unregister_rule pid=5000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:17.305000 audit[5000]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe03672210 a2=0 a3=0 items=0 ppid=2991 pid=5000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.305000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:17.317027 kernel: docker0: port 1(vethe86d367) entered disabled state Sep 11 18:08:17.314990 systemd-networkd[2304]: vethe86d367: Link DOWN Sep 11 18:08:17.311000 audit: ANOM_PROMISCUOUS dev=vethe86d367 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:17.329375 kernel: vethe86d367 (unregistering): left allmulticast mode Sep 11 18:08:17.329402 kernel: vethe86d367 (unregistering): left promiscuous mode Sep 11 18:08:17.329417 kernel: docker0: port 1(vethe86d367) entered disabled state Sep 11 18:08:17.311000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca81157e8e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.311000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:17.341653 systemd[1]: run-docker-netns-c1e8699ffeca.mount: Deactivated successfully. Sep 11 18:08:17.341717 systemd[1]: var-lib-docker-rootfs-overlayfs-c072650f673854f7f64c8500689e4ff6cb87a4f8e9b33413afe7af561113a54d.mount: Deactivated successfully. Sep 11 18:08:17.350000 audit: BPF prog-id=141 op=UNLOAD Sep 11 18:08:17.350000 audit: BPF prog-id=145 op=UNLOAD Sep 11 18:08:17.469876 systemd[1]: tmp-containerd\x2dmount1854176172.mount: Deactivated successfully. Sep 11 18:08:17.545495 containerd[2527]: time="2026-09-11T18:08:17.545402719Z" level=info msg="connecting to shim 000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2" address="unix:///run/containerd/s/8675a26e0714432c45df53921531a50961beb6ab6c7adcf6b0df50e7cf3a1753" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:17.562158 systemd[1]: Started docker-000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2.scope - libcontainer container 000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2. Sep 11 18:08:17.569000 audit: BPF prog-id=146 op=LOAD Sep 11 18:08:17.570000 audit: BPF prog-id=147 op=LOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ee8afccffd8 a2=98 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.570000 audit: BPF prog-id=147 op=UNLOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.570000 audit: BPF prog-id=148 op=LOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ee8afcd0290 a2=98 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.570000 audit: BPF prog-id=149 op=LOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3ee8afccffe8 a2=98 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.570000 audit: BPF prog-id=149 op=UNLOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.570000 audit: BPF prog-id=148 op=UNLOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.570000 audit: BPF prog-id=150 op=LOAD Sep 11 18:08:17.570000 audit[5029]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ee8afcd04f0 a2=98 a3=0 items=0 ppid=5019 pid=5029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30303062386330303034373536343332323837363034396536 Sep 11 18:08:17.592266 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:17.593624 kernel: docker0: port 1(veth1c49153) entered blocking state Sep 11 18:08:17.593657 kernel: docker0: port 1(veth1c49153) entered disabled state Sep 11 18:08:17.594556 kernel: veth1c49153: entered allmulticast mode Sep 11 18:08:17.590000 audit: ANOM_PROMISCUOUS dev=veth1c49153 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:17.595465 kernel: veth1c49153: entered promiscuous mode Sep 11 18:08:17.590000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811cb55f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.590000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:17.596000 audit[5049]: NETFILTER_CFG table=raw:74 family=2 entries=1 op=nft_register_rule pid=5049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:17.596000 audit[5049]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdaf56c270 a2=0 a3=0 items=0 ppid=2991 pid=5049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:17.596000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:17.598078 systemd-networkd[2304]: veth1c49153: Link UP Sep 11 18:08:17.606957 kernel: eth0: renamed from veth1b9010c Sep 11 18:08:17.607022 kernel: docker0: port 1(veth1c49153) entered blocking state Sep 11 18:08:17.607040 kernel: docker0: port 1(veth1c49153) entered forwarding state Sep 11 18:08:17.607043 systemd-networkd[2304]: veth1c49153: Gained carrier Sep 11 18:08:17.607439 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:17.614734 dockerd[2991]: time="2026-09-11T18:08:17.614703626Z" level=info msg="sbJoin: gwep4 ''->'d2f1767dc9b5', gwep6 ''->''" eid=d2f1767dc9b5 ep=quirky_pascal net=bridge nid=ad3b593e9776 Sep 11 18:08:18.635999 systemd[1]: docker-000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2.scope: Deactivated successfully. Sep 11 18:08:18.649300 dockerd[2991]: time="2026-09-11T18:08:18.649259870Z" level=info msg="ignoring event" container=000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:18.649952 containerd[2527]: time="2026-09-11T18:08:18.649877330Z" level=info msg="shim disconnected" id=000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2 namespace=moby Sep 11 18:08:18.649952 containerd[2527]: time="2026-09-11T18:08:18.649910971Z" level=info msg="cleaning up after shim disconnected" id=000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2 namespace=moby Sep 11 18:08:18.649952 containerd[2527]: time="2026-09-11T18:08:18.649918149Z" level=info msg="cleaning up dead shim" id=000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2 namespace=moby Sep 11 18:08:18.683980 systemd-networkd[2304]: veth1c49153: Lost carrier Sep 11 18:08:18.684971 kernel: docker0: port 1(veth1c49153) entered disabled state Sep 11 18:08:18.684994 kernel: veth1b9010c: renamed from eth0 Sep 11 18:08:18.697000 audit[5082]: NETFILTER_CFG table=raw:75 family=2 entries=1 op=nft_unregister_rule pid=5082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:18.697000 audit[5082]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffffbc61230 a2=0 a3=0 items=0 ppid=2991 pid=5082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.697000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:18.705470 systemd-networkd[2304]: veth1c49153: Link DOWN Sep 11 18:08:18.707058 kernel: docker0: port 1(veth1c49153) entered disabled state Sep 11 18:08:18.709831 kernel: veth1c49153 (unregistering): left allmulticast mode Sep 11 18:08:18.709891 kernel: veth1c49153 (unregistering): left promiscuous mode Sep 11 18:08:18.704000 audit: ANOM_PROMISCUOUS dev=veth1c49153 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:18.711204 kernel: docker0: port 1(veth1c49153) entered disabled state Sep 11 18:08:18.704000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca81157fde0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.704000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:18.719216 systemd[1]: run-docker-netns-27458d054034.mount: Deactivated successfully. Sep 11 18:08:18.722264 systemd[1]: var-lib-docker-rootfs-overlayfs-000b8c00047564322876049e64b321c08cf201cef33c950922d9ffb67d02c2c2.mount: Deactivated successfully. Sep 11 18:08:18.731000 audit: BPF prog-id=146 op=UNLOAD Sep 11 18:08:18.731000 audit: BPF prog-id=150 op=UNLOAD Sep 11 18:08:18.849624 systemd[1]: tmp-containerd\x2dmount2205845393.mount: Deactivated successfully. Sep 11 18:08:18.916169 containerd[2527]: time="2026-09-11T18:08:18.916031844Z" level=info msg="connecting to shim d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67" address="unix:///run/containerd/s/2870d7e28b0c8a91bd5c28b637d3f32bbc91e784bacd93a2f3ef31833942ddbd" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:18.935153 systemd[1]: Started docker-d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67.scope - libcontainer container d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67. Sep 11 18:08:18.943000 audit: BPF prog-id=151 op=LOAD Sep 11 18:08:18.943000 audit: BPF prog-id=152 op=LOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e01274ebfd8 a2=98 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.943000 audit: BPF prog-id=152 op=UNLOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.943000 audit: BPF prog-id=153 op=LOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e01274ec290 a2=98 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.943000 audit: BPF prog-id=154 op=LOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1e01274ebfe8 a2=98 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.943000 audit: BPF prog-id=154 op=UNLOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.943000 audit: BPF prog-id=153 op=UNLOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.943000 audit: BPF prog-id=155 op=LOAD Sep 11 18:08:18.943000 audit[5113]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e01274ec4f0 a2=98 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373966353364643631353365613566363930353433363332 Sep 11 18:08:18.966807 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:18.969212 kernel: docker0: port 1(veth700afdc) entered blocking state Sep 11 18:08:18.969358 kernel: docker0: port 1(veth700afdc) entered disabled state Sep 11 18:08:18.970745 kernel: veth700afdc: entered allmulticast mode Sep 11 18:08:18.965000 audit: ANOM_PROMISCUOUS dev=veth700afdc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:18.965000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155f530 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.965000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:18.972202 kernel: veth700afdc: entered promiscuous mode Sep 11 18:08:18.973000 audit[5135]: NETFILTER_CFG table=raw:76 family=2 entries=1 op=nft_register_rule pid=5135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:18.973000 audit[5135]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe67823800 a2=0 a3=0 items=0 ppid=2991 pid=5135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:18.973000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:18.974883 systemd-networkd[2304]: veth700afdc: Link UP Sep 11 18:08:18.985025 kernel: eth0: renamed from vethc3cd79e Sep 11 18:08:18.987159 kernel: docker0: port 1(veth700afdc) entered blocking state Sep 11 18:08:18.987226 kernel: docker0: port 1(veth700afdc) entered forwarding state Sep 11 18:08:18.987267 systemd-networkd[2304]: veth700afdc: Gained carrier Sep 11 18:08:18.987675 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:18.998346 dockerd[2991]: time="2026-09-11T18:08:18.998325846Z" level=info msg="sbJoin: gwep4 ''->'c4f5d6dcec8a', gwep6 ''->''" eid=c4f5d6dcec8a ep=strange_kalam net=bridge nid=ad3b593e9776 Sep 11 18:08:20.022021 systemd[1]: docker-d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67.scope: Deactivated successfully. Sep 11 18:08:20.035181 dockerd[2991]: time="2026-09-11T18:08:20.035058560Z" level=info msg="ignoring event" container=d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:20.035514 containerd[2527]: time="2026-09-11T18:08:20.035294693Z" level=info msg="shim disconnected" id=d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67 namespace=moby Sep 11 18:08:20.035514 containerd[2527]: time="2026-09-11T18:08:20.035363138Z" level=info msg="cleaning up after shim disconnected" id=d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67 namespace=moby Sep 11 18:08:20.035514 containerd[2527]: time="2026-09-11T18:08:20.035372930Z" level=info msg="cleaning up dead shim" id=d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67 namespace=moby Sep 11 18:08:20.059792 systemd-networkd[2304]: veth700afdc: Lost carrier Sep 11 18:08:20.060346 kernel: docker0: port 1(veth700afdc) entered disabled state Sep 11 18:08:20.060374 kernel: vethc3cd79e: renamed from eth0 Sep 11 18:08:20.074000 audit[5165]: NETFILTER_CFG table=raw:77 family=2 entries=1 op=nft_unregister_rule pid=5165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:20.076853 kernel: kauditd_printk_skb: 134 callbacks suppressed Sep 11 18:08:20.076895 kernel: audit: type=1325 audit(1789150100.074:676): table=raw:77 family=2 entries=1 op=nft_unregister_rule pid=5165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:20.074000 audit[5165]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc9cb70da0 a2=0 a3=0 items=0 ppid=2991 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.083299 kernel: audit: type=1300 audit(1789150100.074:676): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc9cb70da0 a2=0 a3=0 items=0 ppid=2991 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.074000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:20.094626 kernel: audit: type=1327 audit(1789150100.074:676): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:20.096209 systemd-networkd[2304]: veth700afdc: Link DOWN Sep 11 18:08:20.097204 kernel: docker0: port 1(veth700afdc) entered disabled state Sep 11 18:08:20.097252 kernel: veth700afdc (unregistering): left allmulticast mode Sep 11 18:08:20.099137 kernel: veth700afdc (unregistering): left promiscuous mode Sep 11 18:08:20.094000 audit: ANOM_PROMISCUOUS dev=veth700afdc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:20.101373 kernel: docker0: port 1(veth700afdc) entered disabled state Sep 11 18:08:20.101393 kernel: audit: type=1700 audit(1789150100.094:677): dev=veth700afdc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:20.094000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbafc0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.117066 kernel: audit: type=1300 audit(1789150100.094:677): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbafc0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.117417 systemd[1]: run-docker-netns-9b4ce24b5c41.mount: Deactivated successfully. Sep 11 18:08:20.094000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:20.122022 kernel: audit: type=1327 audit(1789150100.094:677): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:20.125050 systemd[1]: var-lib-docker-rootfs-overlayfs-d79f53dd6153ea5f6905436322987000423dd72ed28cfec1992fb3497eaacc67.mount: Deactivated successfully. Sep 11 18:08:20.130000 audit: BPF prog-id=151 op=UNLOAD Sep 11 18:08:20.130000 audit: BPF prog-id=155 op=UNLOAD Sep 11 18:08:20.133038 kernel: audit: type=1334 audit(1789150100.130:678): prog-id=151 op=UNLOAD Sep 11 18:08:20.133079 kernel: audit: type=1334 audit(1789150100.130:679): prog-id=155 op=UNLOAD Sep 11 18:08:20.265027 systemd[1]: tmp-containerd\x2dmount4279325105.mount: Deactivated successfully. Sep 11 18:08:20.346606 containerd[2527]: time="2026-09-11T18:08:20.346519179Z" level=info msg="connecting to shim b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23" address="unix:///run/containerd/s/6f6b60413a6da217595e9147668953a5aa8a89d35f49a947e3e4d76ad2f706d7" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:20.366175 systemd[1]: Started docker-b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23.scope - libcontainer container b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23. Sep 11 18:08:20.373000 audit: BPF prog-id=156 op=LOAD Sep 11 18:08:20.376098 kernel: audit: type=1334 audit(1789150100.373:680): prog-id=156 op=LOAD Sep 11 18:08:20.375000 audit: BPF prog-id=157 op=LOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=274fabbdffd8 a2=98 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.375000 audit: BPF prog-id=157 op=UNLOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.375000 audit: BPF prog-id=158 op=LOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=274fabbe0290 a2=98 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.375000 audit: BPF prog-id=159 op=LOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=274fabbdffe8 a2=98 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.375000 audit: BPF prog-id=159 op=UNLOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.375000 audit: BPF prog-id=158 op=UNLOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.375000 audit: BPF prog-id=160 op=LOAD Sep 11 18:08:20.375000 audit[5194]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=274fabbe04f0 a2=98 a3=0 items=0 ppid=5183 pid=5194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62363236366363353239303930346235643365653338393632 Sep 11 18:08:20.378050 kernel: audit: type=1334 audit(1789150100.375:681): prog-id=157 op=LOAD Sep 11 18:08:20.395717 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:20.397749 kernel: docker0: port 1(veth9dcf11a) entered blocking state Sep 11 18:08:20.397779 kernel: docker0: port 1(veth9dcf11a) entered disabled state Sep 11 18:08:20.398608 kernel: veth9dcf11a: entered allmulticast mode Sep 11 18:08:20.394000 audit: ANOM_PROMISCUOUS dev=veth9dcf11a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:20.399797 kernel: veth9dcf11a: entered promiscuous mode Sep 11 18:08:20.394000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f88a80 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.394000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:20.401000 audit[5215]: NETFILTER_CFG table=raw:78 family=2 entries=1 op=nft_register_rule pid=5215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:20.401000 audit[5215]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc5b3a3b90 a2=0 a3=0 items=0 ppid=2991 pid=5215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:20.401000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:20.403094 systemd-networkd[2304]: veth9dcf11a: Link UP Sep 11 18:08:20.412378 kernel: eth0: renamed from veth0aa6001 Sep 11 18:08:20.412429 kernel: docker0: port 1(veth9dcf11a) entered blocking state Sep 11 18:08:20.412446 kernel: docker0: port 1(veth9dcf11a) entered forwarding state Sep 11 18:08:20.412490 systemd-networkd[2304]: veth9dcf11a: Gained carrier Sep 11 18:08:20.412736 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:20.424605 dockerd[2991]: time="2026-09-11T18:08:20.424574413Z" level=info msg="sbJoin: gwep4 ''->'0bdf1c67012c', gwep6 ''->''" eid=0bdf1c67012c ep=goofy_shtern net=bridge nid=ad3b593e9776 Sep 11 18:08:21.449520 systemd[1]: docker-b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23.scope: Deactivated successfully. Sep 11 18:08:21.461491 dockerd[2991]: time="2026-09-11T18:08:21.461405749Z" level=info msg="ignoring event" container=b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:21.462016 containerd[2527]: time="2026-09-11T18:08:21.461972840Z" level=info msg="shim disconnected" id=b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23 namespace=moby Sep 11 18:08:21.462495 containerd[2527]: time="2026-09-11T18:08:21.462273349Z" level=info msg="cleaning up after shim disconnected" id=b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23 namespace=moby Sep 11 18:08:21.462495 containerd[2527]: time="2026-09-11T18:08:21.462290939Z" level=info msg="cleaning up dead shim" id=b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23 namespace=moby Sep 11 18:08:21.485097 kernel: docker0: port 1(veth9dcf11a) entered disabled state Sep 11 18:08:21.485105 systemd-networkd[2304]: veth9dcf11a: Lost carrier Sep 11 18:08:21.487023 kernel: veth0aa6001: renamed from eth0 Sep 11 18:08:21.498000 audit[5245]: NETFILTER_CFG table=raw:79 family=2 entries=1 op=nft_unregister_rule pid=5245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:21.498000 audit[5245]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff74d69180 a2=0 a3=0 items=0 ppid=2991 pid=5245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.498000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:21.506390 systemd-networkd[2304]: veth9dcf11a: Link DOWN Sep 11 18:08:21.508084 kernel: docker0: port 1(veth9dcf11a) entered disabled state Sep 11 18:08:21.510515 kernel: veth9dcf11a (unregistering): left allmulticast mode Sep 11 18:08:21.510568 kernel: veth9dcf11a (unregistering): left promiscuous mode Sep 11 18:08:21.505000 audit: ANOM_PROMISCUOUS dev=veth9dcf11a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:21.511651 kernel: docker0: port 1(veth9dcf11a) entered disabled state Sep 11 18:08:21.505000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4eae0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.505000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:21.524867 systemd[1]: run-docker-netns-41c1a7edbc5a.mount: Deactivated successfully. Sep 11 18:08:21.527531 systemd[1]: var-lib-docker-rootfs-overlayfs-b6266cc5290904b5d3ee3896238467f78b73d7642cc8df388f414efd3c6bef23.mount: Deactivated successfully. Sep 11 18:08:21.542000 audit: BPF prog-id=156 op=UNLOAD Sep 11 18:08:21.542000 audit: BPF prog-id=160 op=UNLOAD Sep 11 18:08:21.661612 systemd[1]: tmp-containerd\x2dmount250018564.mount: Deactivated successfully. Sep 11 18:08:21.728860 containerd[2527]: time="2026-09-11T18:08:21.728430407Z" level=info msg="connecting to shim 508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060" address="unix:///run/containerd/s/0eecd6904dec0eaf3bc68cd52760e7dbef268cc729dc0f9aa7980a301ad9f34f" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:21.748173 systemd[1]: Started docker-508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060.scope - libcontainer container 508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060. Sep 11 18:08:21.756000 audit: BPF prog-id=161 op=LOAD Sep 11 18:08:21.756000 audit: BPF prog-id=162 op=LOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e0888fb1fd8 a2=98 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.756000 audit: BPF prog-id=162 op=UNLOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.756000 audit: BPF prog-id=163 op=LOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e0888fb2290 a2=98 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.756000 audit: BPF prog-id=164 op=LOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1e0888fb1fe8 a2=98 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.756000 audit: BPF prog-id=164 op=UNLOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.756000 audit: BPF prog-id=163 op=UNLOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.756000 audit: BPF prog-id=165 op=LOAD Sep 11 18:08:21.756000 audit[5275]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e0888fb24f0 a2=98 a3=0 items=0 ppid=5262 pid=5275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35303866313862633230396236313831636334393431333037 Sep 11 18:08:21.779263 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:21.780515 kernel: docker0: port 1(veth2289ce0) entered blocking state Sep 11 18:08:21.780565 kernel: docker0: port 1(veth2289ce0) entered disabled state Sep 11 18:08:21.781029 kernel: veth2289ce0: entered allmulticast mode Sep 11 18:08:21.782357 kernel: veth2289ce0: entered promiscuous mode Sep 11 18:08:21.777000 audit: ANOM_PROMISCUOUS dev=veth2289ce0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:21.777000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f89ef0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.777000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:21.784000 audit[5295]: NETFILTER_CFG table=raw:80 family=2 entries=1 op=nft_register_rule pid=5295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:21.784000 audit[5295]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe661fe480 a2=0 a3=0 items=0 ppid=2991 pid=5295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:21.784000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:21.785863 systemd-networkd[2304]: veth2289ce0: Link UP Sep 11 18:08:21.795413 kernel: eth0: renamed from veth6ea8ecf Sep 11 18:08:21.795471 kernel: docker0: port 1(veth2289ce0) entered blocking state Sep 11 18:08:21.795491 kernel: docker0: port 1(veth2289ce0) entered forwarding state Sep 11 18:08:21.795724 systemd-networkd[2304]: veth2289ce0: Gained carrier Sep 11 18:08:21.795974 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:21.803088 dockerd[2991]: time="2026-09-11T18:08:21.803057248Z" level=info msg="sbJoin: gwep4 ''->'3296edd946dc', gwep6 ''->''" eid=3296edd946dc ep=competent_cerf net=bridge nid=ad3b593e9776 Sep 11 18:08:22.830444 systemd[1]: docker-508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060.scope: Deactivated successfully. Sep 11 18:08:22.844231 containerd[2527]: time="2026-09-11T18:08:22.844071873Z" level=info msg="shim disconnected" id=508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060 namespace=moby Sep 11 18:08:22.844231 containerd[2527]: time="2026-09-11T18:08:22.844105514Z" level=info msg="cleaning up after shim disconnected" id=508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060 namespace=moby Sep 11 18:08:22.844231 containerd[2527]: time="2026-09-11T18:08:22.844113766Z" level=info msg="cleaning up dead shim" id=508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060 namespace=moby Sep 11 18:08:22.869575 systemd-networkd[2304]: veth2289ce0: Lost carrier Sep 11 18:08:22.870331 kernel: docker0: port 1(veth2289ce0) entered disabled state Sep 11 18:08:22.870359 kernel: veth6ea8ecf: renamed from eth0 Sep 11 18:08:22.886000 audit[5326]: NETFILTER_CFG table=raw:81 family=2 entries=1 op=nft_unregister_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:22.886000 audit[5326]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc5764d230 a2=0 a3=0 items=0 ppid=2991 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:22.886000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:22.893466 systemd-networkd[2304]: veth2289ce0: Link DOWN Sep 11 18:08:22.898164 kernel: docker0: port 1(veth2289ce0) entered disabled state Sep 11 18:08:22.898214 kernel: veth2289ce0 (unregistering): left allmulticast mode Sep 11 18:08:22.898233 kernel: veth2289ce0 (unregistering): left promiscuous mode Sep 11 18:08:22.892000 audit: ANOM_PROMISCUOUS dev=veth2289ce0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:22.899191 kernel: docker0: port 1(veth2289ce0) entered disabled state Sep 11 18:08:22.892000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8114b55e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:22.892000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:22.911440 systemd[1]: run-docker-netns-7af3cea913c9.mount: Deactivated successfully. Sep 11 18:08:22.916205 systemd[1]: var-lib-docker-rootfs-overlayfs-508f18bc209b6181cc49413077d72317c900752ef4a309a46cd85ad8fb698060.mount: Deactivated successfully. Sep 11 18:08:22.924000 audit: BPF prog-id=161 op=UNLOAD Sep 11 18:08:22.924000 audit: BPF prog-id=165 op=UNLOAD Sep 11 18:08:23.046834 systemd[1]: tmp-containerd\x2dmount2678880165.mount: Deactivated successfully. Sep 11 18:08:23.162047 containerd[2527]: time="2026-09-11T18:08:23.161202947Z" level=info msg="connecting to shim eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6" address="unix:///run/containerd/s/6414bc68c9210a1e38d38a4d6f126726520497f0621aa19b43cb8b0b53d4c604" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:23.183187 systemd[1]: Started docker-eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6.scope - libcontainer container eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6. Sep 11 18:08:23.190000 audit: BPF prog-id=166 op=LOAD Sep 11 18:08:23.191000 audit: BPF prog-id=167 op=LOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=53ec7563fd8 a2=98 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.191000 audit: BPF prog-id=167 op=UNLOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.191000 audit: BPF prog-id=168 op=LOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=53ec7564290 a2=98 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.191000 audit: BPF prog-id=169 op=LOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=53ec7563fe8 a2=98 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.191000 audit: BPF prog-id=169 op=UNLOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.191000 audit: BPF prog-id=168 op=UNLOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.191000 audit: BPF prog-id=170 op=LOAD Sep 11 18:08:23.191000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=53ec75644f0 a2=98 a3=0 items=0 ppid=5344 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616630653166316334616437636264613561333137383165 Sep 11 18:08:23.211764 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:23.213813 kernel: docker0: port 1(veth6e7e48a) entered blocking state Sep 11 18:08:23.213872 kernel: docker0: port 1(veth6e7e48a) entered disabled state Sep 11 18:08:23.215745 kernel: veth6e7e48a: entered allmulticast mode Sep 11 18:08:23.215799 kernel: veth6e7e48a: entered promiscuous mode Sep 11 18:08:23.210000 audit: ANOM_PROMISCUOUS dev=veth6e7e48a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:23.210000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811776a50 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.210000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:23.217000 audit[5377]: NETFILTER_CFG table=raw:82 family=2 entries=1 op=nft_register_rule pid=5377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:23.217000 audit[5377]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffee2b21330 a2=0 a3=0 items=0 ppid=2991 pid=5377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:23.217000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:23.218494 systemd-networkd[2304]: veth6e7e48a: Link UP Sep 11 18:08:23.230095 kernel: eth0: renamed from veth8ee2ef6 Sep 11 18:08:23.230148 kernel: docker0: port 1(veth6e7e48a) entered blocking state Sep 11 18:08:23.230109 systemd-networkd[2304]: veth6e7e48a: Gained carrier Sep 11 18:08:23.230224 kernel: docker0: port 1(veth6e7e48a) entered forwarding state Sep 11 18:08:23.230613 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:23.252431 dockerd[2991]: time="2026-09-11T18:08:23.252404834Z" level=info msg="sbJoin: gwep4 ''->'bba8fae7c519', gwep6 ''->''" eid=bba8fae7c519 ep=jolly_keller net=bridge nid=ad3b593e9776 Sep 11 18:08:24.277520 systemd[1]: docker-eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6.scope: Deactivated successfully. Sep 11 18:08:24.289886 dockerd[2991]: time="2026-09-11T18:08:24.289850323Z" level=info msg="ignoring event" container=eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:24.290301 containerd[2527]: time="2026-09-11T18:08:24.290155483Z" level=info msg="shim disconnected" id=eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6 namespace=moby Sep 11 18:08:24.290301 containerd[2527]: time="2026-09-11T18:08:24.290190453Z" level=info msg="cleaning up after shim disconnected" id=eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6 namespace=moby Sep 11 18:08:24.290301 containerd[2527]: time="2026-09-11T18:08:24.290198918Z" level=info msg="cleaning up dead shim" id=eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6 namespace=moby Sep 11 18:08:24.314506 systemd-networkd[2304]: veth6e7e48a: Lost carrier Sep 11 18:08:24.315302 kernel: docker0: port 1(veth6e7e48a) entered disabled state Sep 11 18:08:24.315391 kernel: veth8ee2ef6: renamed from eth0 Sep 11 18:08:24.341000 audit[5407]: NETFILTER_CFG table=raw:83 family=2 entries=1 op=nft_unregister_rule pid=5407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:24.341000 audit[5407]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff2fc533a0 a2=0 a3=0 items=0 ppid=2991 pid=5407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.341000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:24.345821 systemd-networkd[2304]: veth6e7e48a: Link DOWN Sep 11 18:08:24.347028 kernel: docker0: port 1(veth6e7e48a) entered disabled state Sep 11 18:08:24.344000 audit: ANOM_PROMISCUOUS dev=veth6e7e48a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:24.350309 kernel: veth6e7e48a (unregistering): left allmulticast mode Sep 11 18:08:24.350334 kernel: veth6e7e48a (unregistering): left promiscuous mode Sep 11 18:08:24.350350 kernel: docker0: port 1(veth6e7e48a) entered disabled state Sep 11 18:08:24.344000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8af40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.344000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:24.361211 systemd[1]: run-docker-netns-7813e2b6f406.mount: Deactivated successfully. Sep 11 18:08:24.365150 systemd[1]: var-lib-docker-rootfs-overlayfs-eaf0e1f1c4ad7cbda5a31781e7cb7f542af80e0faee0d44ad2b9a50dd22c86f6.mount: Deactivated successfully. Sep 11 18:08:24.372000 audit: BPF prog-id=166 op=UNLOAD Sep 11 18:08:24.372000 audit: BPF prog-id=170 op=UNLOAD Sep 11 18:08:24.476454 systemd[1]: tmp-containerd\x2dmount3300305537.mount: Deactivated successfully. Sep 11 18:08:24.542663 containerd[2527]: time="2026-09-11T18:08:24.542559445Z" level=info msg="connecting to shim f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d" address="unix:///run/containerd/s/d1f05932496989efe2ed0057568e800c6945776a1e54a8f14ef9291115dbec46" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:24.564200 systemd[1]: Started docker-f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d.scope - libcontainer container f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d. Sep 11 18:08:24.572000 audit: BPF prog-id=171 op=LOAD Sep 11 18:08:24.572000 audit: BPF prog-id=172 op=LOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=234dc133ffd8 a2=98 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.572000 audit: BPF prog-id=172 op=UNLOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.572000 audit: BPF prog-id=173 op=LOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=234dc1340290 a2=98 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.572000 audit: BPF prog-id=174 op=LOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=234dc133ffe8 a2=98 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.572000 audit: BPF prog-id=174 op=UNLOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.572000 audit: BPF prog-id=173 op=UNLOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.572000 audit: BPF prog-id=175 op=LOAD Sep 11 18:08:24.572000 audit[5436]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=234dc13404f0 a2=98 a3=0 items=0 ppid=5425 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66393964636436646133393733313437316537303937646165 Sep 11 18:08:24.592250 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:24.595701 kernel: docker0: port 1(veth0adecca) entered blocking state Sep 11 18:08:24.595739 kernel: docker0: port 1(veth0adecca) entered disabled state Sep 11 18:08:24.595759 kernel: veth0adecca: entered allmulticast mode Sep 11 18:08:24.595778 kernel: veth0adecca: entered promiscuous mode Sep 11 18:08:24.591000 audit: ANOM_PROMISCUOUS dev=veth0adecca prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:24.591000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811310f00 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.591000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:24.597000 audit[5457]: NETFILTER_CFG table=raw:84 family=2 entries=1 op=nft_register_rule pid=5457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:24.597000 audit[5457]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffca85ca890 a2=0 a3=0 items=0 ppid=2991 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:24.597000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:24.598951 systemd-networkd[2304]: veth0adecca: Link UP Sep 11 18:08:24.607056 kernel: eth0: renamed from veth29ee6a1 Sep 11 18:08:24.609333 kernel: docker0: port 1(veth0adecca) entered blocking state Sep 11 18:08:24.609122 systemd-networkd[2304]: veth0adecca: Gained carrier Sep 11 18:08:24.609434 kernel: docker0: port 1(veth0adecca) entered forwarding state Sep 11 18:08:24.609880 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:24.618247 dockerd[2991]: time="2026-09-11T18:08:24.618220703Z" level=info msg="sbJoin: gwep4 ''->'2584733a0f9a', gwep6 ''->''" eid=2584733a0f9a ep=happy_payne net=bridge nid=ad3b593e9776 Sep 11 18:08:25.641153 systemd[1]: docker-f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d.scope: Deactivated successfully. Sep 11 18:08:25.654252 dockerd[2991]: time="2026-09-11T18:08:25.654148789Z" level=info msg="ignoring event" container=f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:25.654702 containerd[2527]: time="2026-09-11T18:08:25.654661014Z" level=info msg="shim disconnected" id=f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d namespace=moby Sep 11 18:08:25.654702 containerd[2527]: time="2026-09-11T18:08:25.654702155Z" level=info msg="cleaning up after shim disconnected" id=f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d namespace=moby Sep 11 18:08:25.654702 containerd[2527]: time="2026-09-11T18:08:25.654709559Z" level=info msg="cleaning up dead shim" id=f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d namespace=moby Sep 11 18:08:25.676773 systemd-networkd[2304]: veth0adecca: Lost carrier Sep 11 18:08:25.677614 kernel: docker0: port 1(veth0adecca) entered disabled state Sep 11 18:08:25.677644 kernel: veth29ee6a1: renamed from eth0 Sep 11 18:08:25.694000 audit[5488]: NETFILTER_CFG table=raw:85 family=2 entries=1 op=nft_unregister_rule pid=5488 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:25.696549 kernel: kauditd_printk_skb: 134 callbacks suppressed Sep 11 18:08:25.696596 kernel: audit: type=1325 audit(1789150105.694:732): table=raw:85 family=2 entries=1 op=nft_unregister_rule pid=5488 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:25.694000 audit[5488]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcfbde4540 a2=0 a3=0 items=0 ppid=2991 pid=5488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.700318 kernel: audit: type=1300 audit(1789150105.694:732): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcfbde4540 a2=0 a3=0 items=0 ppid=2991 pid=5488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.694000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:25.704565 kernel: audit: type=1327 audit(1789150105.694:732): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:25.705092 systemd-networkd[2304]: veth0adecca: Link DOWN Sep 11 18:08:25.707298 kernel: docker0: port 1(veth0adecca) entered disabled state Sep 11 18:08:25.707348 kernel: veth0adecca (unregistering): left allmulticast mode Sep 11 18:08:25.709241 kernel: veth0adecca (unregistering): left promiscuous mode Sep 11 18:08:25.702000 audit: ANOM_PROMISCUOUS dev=veth0adecca prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:25.711439 kernel: docker0: port 1(veth0adecca) entered disabled state Sep 11 18:08:25.711523 kernel: audit: type=1700 audit(1789150105.702:733): dev=veth0adecca prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:25.702000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8110664a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.702000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:25.725282 kernel: audit: type=1300 audit(1789150105.702:733): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8110664a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.725373 kernel: audit: type=1327 audit(1789150105.702:733): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:25.728103 systemd[1]: run-docker-netns-49de9a677fea.mount: Deactivated successfully. Sep 11 18:08:25.735421 systemd[1]: var-lib-docker-rootfs-overlayfs-f99dcd6da39731471e7097daed2a9bc94f9373d5d130d1e8a56c07d4894ca10d.mount: Deactivated successfully. Sep 11 18:08:25.741000 audit: BPF prog-id=171 op=UNLOAD Sep 11 18:08:25.741000 audit: BPF prog-id=175 op=UNLOAD Sep 11 18:08:25.790750 kernel: audit: type=1334 audit(1789150105.741:734): prog-id=171 op=UNLOAD Sep 11 18:08:25.790818 kernel: audit: type=1334 audit(1789150105.741:735): prog-id=175 op=UNLOAD Sep 11 18:08:25.881647 systemd[1]: tmp-containerd\x2dmount4148824628.mount: Deactivated successfully. Sep 11 18:08:25.952038 containerd[2527]: time="2026-09-11T18:08:25.951385131Z" level=info msg="connecting to shim 387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace" address="unix:///run/containerd/s/5e31f4bc79c0b773deae004f5d98ee4c0a632cb35b15c69a4352accc625a32c0" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:25.971191 systemd[1]: Started docker-387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace.scope - libcontainer container 387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace. Sep 11 18:08:25.978000 audit: BPF prog-id=176 op=LOAD Sep 11 18:08:25.979000 audit: BPF prog-id=177 op=LOAD Sep 11 18:08:25.981699 kernel: audit: type=1334 audit(1789150105.978:736): prog-id=176 op=LOAD Sep 11 18:08:25.981753 kernel: audit: type=1334 audit(1789150105.979:737): prog-id=177 op=LOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=ab119ccdfd8 a2=98 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:25.979000 audit: BPF prog-id=177 op=UNLOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:25.979000 audit: BPF prog-id=178 op=LOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=ab119cce290 a2=98 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:25.979000 audit: BPF prog-id=179 op=LOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=ab119ccdfe8 a2=98 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:25.979000 audit: BPF prog-id=179 op=UNLOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:25.979000 audit: BPF prog-id=178 op=UNLOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:25.979000 audit: BPF prog-id=180 op=LOAD Sep 11 18:08:25.979000 audit[5518]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=ab119cce4f0 a2=98 a3=0 items=0 ppid=5507 pid=5518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:25.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33383736313236323165363465333461623831346137656635 Sep 11 18:08:26.005674 kernel: docker0: port 1(veth26c67dc) entered blocking state Sep 11 18:08:26.005538 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:26.005815 kernel: docker0: port 1(veth26c67dc) entered disabled state Sep 11 18:08:26.006747 kernel: veth26c67dc: entered allmulticast mode Sep 11 18:08:26.002000 audit: ANOM_PROMISCUOUS dev=veth26c67dc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:26.008123 kernel: veth26c67dc: entered promiscuous mode Sep 11 18:08:26.002000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f11830 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:26.002000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:26.009000 audit[5538]: NETFILTER_CFG table=raw:86 family=2 entries=1 op=nft_register_rule pid=5538 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:26.009000 audit[5538]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdbe9d9ab0 a2=0 a3=0 items=0 ppid=2991 pid=5538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:26.009000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:26.011918 systemd-networkd[2304]: veth26c67dc: Link UP Sep 11 18:08:26.020021 kernel: eth0: renamed from vethe940f49 Sep 11 18:08:26.020079 kernel: docker0: port 1(veth26c67dc) entered blocking state Sep 11 18:08:26.021611 kernel: docker0: port 1(veth26c67dc) entered forwarding state Sep 11 18:08:26.021947 systemd-networkd[2304]: veth26c67dc: Gained carrier Sep 11 18:08:26.022250 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:26.032029 dockerd[2991]: time="2026-09-11T18:08:26.031651317Z" level=info msg="sbJoin: gwep4 ''->'0dfbd9f6a61e', gwep6 ''->''" eid=0dfbd9f6a61e ep=compassionate_bell net=bridge nid=ad3b593e9776 Sep 11 18:08:27.054080 systemd[1]: docker-387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace.scope: Deactivated successfully. Sep 11 18:08:27.066529 dockerd[2991]: time="2026-09-11T18:08:27.066487765Z" level=info msg="ignoring event" container=387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:27.066844 containerd[2527]: time="2026-09-11T18:08:27.066785208Z" level=info msg="shim disconnected" id=387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace namespace=moby Sep 11 18:08:27.066844 containerd[2527]: time="2026-09-11T18:08:27.066830425Z" level=info msg="cleaning up after shim disconnected" id=387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace namespace=moby Sep 11 18:08:27.066844 containerd[2527]: time="2026-09-11T18:08:27.066837356Z" level=info msg="cleaning up dead shim" id=387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace namespace=moby Sep 11 18:08:27.091918 systemd-networkd[2304]: veth26c67dc: Lost carrier Sep 11 18:08:27.093218 kernel: docker0: port 1(veth26c67dc) entered disabled state Sep 11 18:08:27.093242 kernel: vethe940f49: renamed from eth0 Sep 11 18:08:27.106000 audit[5568]: NETFILTER_CFG table=raw:87 family=2 entries=1 op=nft_unregister_rule pid=5568 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:27.106000 audit[5568]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff51f7d600 a2=0 a3=0 items=0 ppid=2991 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.106000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:27.117421 systemd-networkd[2304]: veth26c67dc: Link DOWN Sep 11 18:08:27.119030 kernel: docker0: port 1(veth26c67dc) entered disabled state Sep 11 18:08:27.121502 kernel: veth26c67dc (unregistering): left allmulticast mode Sep 11 18:08:27.121554 kernel: veth26c67dc (unregistering): left promiscuous mode Sep 11 18:08:27.116000 audit: ANOM_PROMISCUOUS dev=veth26c67dc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:27.122779 kernel: docker0: port 1(veth26c67dc) entered disabled state Sep 11 18:08:27.116000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dba420 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.116000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:27.134585 systemd[1]: run-docker-netns-7b9e1b761110.mount: Deactivated successfully. Sep 11 18:08:27.139358 systemd[1]: var-lib-docker-rootfs-overlayfs-387612621e64e34ab814a7ef52e7ec6eeb98c3cdd244854c7dd0b2fc9dc13ace.mount: Deactivated successfully. Sep 11 18:08:27.147000 audit: BPF prog-id=176 op=UNLOAD Sep 11 18:08:27.147000 audit: BPF prog-id=180 op=UNLOAD Sep 11 18:08:27.285460 systemd[1]: tmp-containerd\x2dmount2134059262.mount: Deactivated successfully. Sep 11 18:08:27.370024 containerd[2527]: time="2026-09-11T18:08:27.369410793Z" level=info msg="connecting to shim 39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4" address="unix:///run/containerd/s/7811beb1ea2fc1e515d6bf96ae4a1413e7e732922f3d19f80661d04fb2ea9a17" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:27.393210 systemd[1]: Started docker-39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4.scope - libcontainer container 39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4. Sep 11 18:08:27.401000 audit: BPF prog-id=181 op=LOAD Sep 11 18:08:27.401000 audit: BPF prog-id=182 op=LOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3cbc92ab1fd8 a2=98 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.401000 audit: BPF prog-id=182 op=UNLOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.401000 audit: BPF prog-id=183 op=LOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3cbc92ab2290 a2=98 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.401000 audit: BPF prog-id=184 op=LOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3cbc92ab1fe8 a2=98 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.401000 audit: BPF prog-id=184 op=UNLOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.401000 audit: BPF prog-id=183 op=UNLOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.401000 audit: BPF prog-id=185 op=LOAD Sep 11 18:08:27.401000 audit[5596]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3cbc92ab24f0 a2=98 a3=0 items=0 ppid=5585 pid=5596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33396535346562363539633935376432666235353161653463 Sep 11 18:08:27.427997 kernel: docker0: port 1(veth6e16ef6) entered blocking state Sep 11 18:08:27.428074 kernel: docker0: port 1(veth6e16ef6) entered disabled state Sep 11 18:08:27.429029 kernel: veth6e16ef6: entered allmulticast mode Sep 11 18:08:27.424000 audit: ANOM_PROMISCUOUS dev=veth6e16ef6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:27.431017 kernel: veth6e16ef6: entered promiscuous mode Sep 11 18:08:27.424000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111ce210 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.424000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:27.431708 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:27.433000 audit[5618]: NETFILTER_CFG table=raw:88 family=2 entries=1 op=nft_register_rule pid=5618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:27.433000 audit[5618]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe58252920 a2=0 a3=0 items=0 ppid=2991 pid=5618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:27.433000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:27.435125 systemd-networkd[2304]: veth6e16ef6: Link UP Sep 11 18:08:27.451027 kernel: eth0: renamed from vethddbe70c Sep 11 18:08:27.453617 kernel: docker0: port 1(veth6e16ef6) entered blocking state Sep 11 18:08:27.453667 kernel: docker0: port 1(veth6e16ef6) entered forwarding state Sep 11 18:08:27.453670 systemd-networkd[2304]: veth6e16ef6: Gained carrier Sep 11 18:08:27.454148 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:27.463132 dockerd[2991]: time="2026-09-11T18:08:27.463105703Z" level=info msg="sbJoin: gwep4 ''->'fb4b2df64444', gwep6 ''->''" eid=fb4b2df64444 ep=zealous_wiles net=bridge nid=ad3b593e9776 Sep 11 18:08:28.486136 systemd[1]: docker-39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4.scope: Deactivated successfully. Sep 11 18:08:28.498396 dockerd[2991]: time="2026-09-11T18:08:28.498358334Z" level=info msg="ignoring event" container=39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:28.499577 containerd[2527]: time="2026-09-11T18:08:28.499540399Z" level=info msg="shim disconnected" id=39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4 namespace=moby Sep 11 18:08:28.499577 containerd[2527]: time="2026-09-11T18:08:28.499575328Z" level=info msg="cleaning up after shim disconnected" id=39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4 namespace=moby Sep 11 18:08:28.499924 containerd[2527]: time="2026-09-11T18:08:28.499582758Z" level=info msg="cleaning up dead shim" id=39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4 namespace=moby Sep 11 18:08:28.522645 systemd-networkd[2304]: veth6e16ef6: Lost carrier Sep 11 18:08:28.523482 kernel: docker0: port 1(veth6e16ef6) entered disabled state Sep 11 18:08:28.523517 kernel: vethddbe70c: renamed from eth0 Sep 11 18:08:28.544000 audit[5648]: NETFILTER_CFG table=raw:89 family=2 entries=1 op=nft_unregister_rule pid=5648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:28.544000 audit[5648]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff41ec5200 a2=0 a3=0 items=0 ppid=2991 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.544000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:28.547781 systemd-networkd[2304]: veth6e16ef6: Link DOWN Sep 11 18:08:28.546000 audit: ANOM_PROMISCUOUS dev=veth6e16ef6 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:28.552310 kernel: docker0: port 1(veth6e16ef6) entered disabled state Sep 11 18:08:28.552340 kernel: veth6e16ef6 (unregistering): left allmulticast mode Sep 11 18:08:28.552359 kernel: veth6e16ef6 (unregistering): left promiscuous mode Sep 11 18:08:28.552375 kernel: docker0: port 1(veth6e16ef6) entered disabled state Sep 11 18:08:28.546000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dba820 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.546000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:28.566333 systemd[1]: run-docker-netns-48f6f1da464c.mount: Deactivated successfully. Sep 11 18:08:28.570203 systemd[1]: var-lib-docker-rootfs-overlayfs-39e54eb659c957d2fb551ae4cfe982498466f563a23e11422a41848ad04f44b4.mount: Deactivated successfully. Sep 11 18:08:28.581000 audit: BPF prog-id=181 op=UNLOAD Sep 11 18:08:28.581000 audit: BPF prog-id=185 op=UNLOAD Sep 11 18:08:28.677931 systemd[1]: tmp-containerd\x2dmount157954509.mount: Deactivated successfully. Sep 11 18:08:28.749701 containerd[2527]: time="2026-09-11T18:08:28.749562794Z" level=info msg="connecting to shim 82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695" address="unix:///run/containerd/s/3c6dee44c8ea3e50580cad65d00c0200ef03d5c28225bf3fb371dc13bf3a8f1c" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:28.773174 systemd[1]: Started docker-82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695.scope - libcontainer container 82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695. Sep 11 18:08:28.781000 audit: BPF prog-id=186 op=LOAD Sep 11 18:08:28.782000 audit: BPF prog-id=187 op=LOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f46a360dfd8 a2=98 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.782000 audit: BPF prog-id=187 op=UNLOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.782000 audit: BPF prog-id=188 op=LOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f46a360e290 a2=98 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.782000 audit: BPF prog-id=189 op=LOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3f46a360dfe8 a2=98 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.782000 audit: BPF prog-id=189 op=UNLOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.782000 audit: BPF prog-id=188 op=UNLOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.782000 audit: BPF prog-id=190 op=LOAD Sep 11 18:08:28.782000 audit[5676]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f46a360e4f0 a2=98 a3=0 items=0 ppid=5665 pid=5676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38326562623134356637333466663761666362346562313162 Sep 11 18:08:28.806112 kernel: docker0: port 1(vetheae321e) entered blocking state Sep 11 18:08:28.806169 kernel: docker0: port 1(vetheae321e) entered disabled state Sep 11 18:08:28.806718 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:28.803000 audit: ANOM_PROMISCUOUS dev=vetheae321e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:28.808220 kernel: vetheae321e: entered allmulticast mode Sep 11 18:08:28.808239 kernel: vetheae321e: entered promiscuous mode Sep 11 18:08:28.803000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111cfb30 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.803000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:28.809000 audit[5697]: NETFILTER_CFG table=raw:90 family=2 entries=1 op=nft_register_rule pid=5697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:28.809000 audit[5697]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc363b53b0 a2=0 a3=0 items=0 ppid=2991 pid=5697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:28.809000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:28.811131 systemd-networkd[2304]: vetheae321e: Link UP Sep 11 18:08:28.823020 kernel: eth0: renamed from veth9f24b4f Sep 11 18:08:28.823075 kernel: docker0: port 1(vetheae321e) entered blocking state Sep 11 18:08:28.824975 kernel: docker0: port 1(vetheae321e) entered forwarding state Sep 11 18:08:28.825091 systemd-networkd[2304]: vetheae321e: Gained carrier Sep 11 18:08:28.825546 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:28.834143 dockerd[2991]: time="2026-09-11T18:08:28.834114777Z" level=info msg="sbJoin: gwep4 ''->'13bdb3774131', gwep6 ''->''" eid=13bdb3774131 ep=gifted_kare net=bridge nid=ad3b593e9776 Sep 11 18:08:29.857891 systemd[1]: docker-82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695.scope: Deactivated successfully. Sep 11 18:08:29.870939 containerd[2527]: time="2026-09-11T18:08:29.870900825Z" level=info msg="shim disconnected" id=82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695 namespace=moby Sep 11 18:08:29.870939 containerd[2527]: time="2026-09-11T18:08:29.870929253Z" level=info msg="cleaning up after shim disconnected" id=82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695 namespace=moby Sep 11 18:08:29.870939 containerd[2527]: time="2026-09-11T18:08:29.870936710Z" level=info msg="cleaning up dead shim" id=82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695 namespace=moby Sep 11 18:08:29.871311 dockerd[2991]: time="2026-09-11T18:08:29.871083694Z" level=info msg="ignoring event" container=82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:29.905761 systemd-networkd[2304]: vetheae321e: Lost carrier Sep 11 18:08:29.906569 kernel: docker0: port 1(vetheae321e) entered disabled state Sep 11 18:08:29.906598 kernel: veth9f24b4f: renamed from eth0 Sep 11 18:08:29.924000 audit[5728]: NETFILTER_CFG table=raw:91 family=2 entries=1 op=nft_unregister_rule pid=5728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:29.924000 audit[5728]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffedd309530 a2=0 a3=0 items=0 ppid=2991 pid=5728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:29.924000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:29.928714 systemd-networkd[2304]: vetheae321e: Link DOWN Sep 11 18:08:29.930023 kernel: docker0: port 1(vetheae321e) entered disabled state Sep 11 18:08:29.927000 audit: ANOM_PROMISCUOUS dev=vetheae321e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:29.933039 kernel: vetheae321e (unregistering): left allmulticast mode Sep 11 18:08:29.933067 kernel: vetheae321e (unregistering): left promiscuous mode Sep 11 18:08:29.933083 kernel: docker0: port 1(vetheae321e) entered disabled state Sep 11 18:08:29.927000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbbbe0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:29.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:29.944169 systemd[1]: run-docker-netns-6cbfd808e194.mount: Deactivated successfully. Sep 11 18:08:29.955000 audit: BPF prog-id=186 op=UNLOAD Sep 11 18:08:29.955000 audit: BPF prog-id=190 op=UNLOAD Sep 11 18:08:29.956072 systemd[1]: var-lib-docker-rootfs-overlayfs-82ebb145f734ff7afcb4eb11b6882e450af0f6511567597f4934ae3df4c77695.mount: Deactivated successfully. Sep 11 18:08:30.080654 systemd[1]: tmp-containerd\x2dmount2490933119.mount: Deactivated successfully. Sep 11 18:08:30.156728 containerd[2527]: time="2026-09-11T18:08:30.156640571Z" level=info msg="connecting to shim 03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a" address="unix:///run/containerd/s/db6bf602369944072f5e2ed313d9e9356015fe3b6fecabdf9d3c73d820b596bb" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:30.176167 systemd[1]: Started docker-03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a.scope - libcontainer container 03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a. Sep 11 18:08:30.184000 audit: BPF prog-id=191 op=LOAD Sep 11 18:08:30.184000 audit: BPF prog-id=192 op=LOAD Sep 11 18:08:30.184000 audit[5757]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2fd4012dbfd8 a2=98 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.184000 audit: BPF prog-id=192 op=UNLOAD Sep 11 18:08:30.184000 audit[5757]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.186000 audit: BPF prog-id=193 op=LOAD Sep 11 18:08:30.186000 audit[5757]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2fd4012dc290 a2=98 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.186000 audit: BPF prog-id=194 op=LOAD Sep 11 18:08:30.186000 audit[5757]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=2fd4012dbfe8 a2=98 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.186000 audit: BPF prog-id=194 op=UNLOAD Sep 11 18:08:30.186000 audit[5757]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.186000 audit: BPF prog-id=193 op=UNLOAD Sep 11 18:08:30.186000 audit[5757]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.186000 audit: BPF prog-id=195 op=LOAD Sep 11 18:08:30.186000 audit[5757]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2fd4012dc4f0 a2=98 a3=0 items=0 ppid=5746 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30336661643430373161373032336634376133633133386363 Sep 11 18:08:30.209365 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:30.210910 kernel: docker0: port 1(vethf7c3e8b) entered blocking state Sep 11 18:08:30.210935 kernel: docker0: port 1(vethf7c3e8b) entered disabled state Sep 11 18:08:30.207000 audit: ANOM_PROMISCUOUS dev=vethf7c3e8b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:30.212588 kernel: vethf7c3e8b: entered allmulticast mode Sep 11 18:08:30.212618 kernel: vethf7c3e8b: entered promiscuous mode Sep 11 18:08:30.207000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a1ec0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.207000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:30.214000 audit[5779]: NETFILTER_CFG table=raw:92 family=2 entries=1 op=nft_register_rule pid=5779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:30.214000 audit[5779]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffed50783b0 a2=0 a3=0 items=0 ppid=2991 pid=5779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:30.214000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:30.215689 systemd-networkd[2304]: vethf7c3e8b: Link UP Sep 11 18:08:30.241030 kernel: eth0: renamed from veth45bec42 Sep 11 18:08:30.243487 kernel: docker0: port 1(vethf7c3e8b) entered blocking state Sep 11 18:08:30.243479 systemd-networkd[2304]: vethf7c3e8b: Gained carrier Sep 11 18:08:30.243815 kernel: docker0: port 1(vethf7c3e8b) entered forwarding state Sep 11 18:08:30.243987 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:30.251740 dockerd[2991]: time="2026-09-11T18:08:30.251711974Z" level=info msg="sbJoin: gwep4 ''->'d52d9e42777e', gwep6 ''->''" eid=d52d9e42777e ep=objective_hertz net=bridge nid=ad3b593e9776 Sep 11 18:08:31.286689 systemd[1]: docker-03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a.scope: Deactivated successfully. Sep 11 18:08:31.300334 dockerd[2991]: time="2026-09-11T18:08:31.300233761Z" level=info msg="ignoring event" container=03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:31.301520 containerd[2527]: time="2026-09-11T18:08:31.301429930Z" level=info msg="shim disconnected" id=03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a namespace=moby Sep 11 18:08:31.301520 containerd[2527]: time="2026-09-11T18:08:31.301463086Z" level=info msg="cleaning up after shim disconnected" id=03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a namespace=moby Sep 11 18:08:31.301520 containerd[2527]: time="2026-09-11T18:08:31.301471074Z" level=info msg="cleaning up dead shim" id=03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a namespace=moby Sep 11 18:08:31.324535 systemd-networkd[2304]: vethf7c3e8b: Lost carrier Sep 11 18:08:31.325642 kernel: docker0: port 1(vethf7c3e8b) entered disabled state Sep 11 18:08:31.325664 kernel: veth45bec42: renamed from eth0 Sep 11 18:08:31.355000 audit[5811]: NETFILTER_CFG table=raw:93 family=2 entries=1 op=nft_unregister_rule pid=5811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:31.357139 kernel: kauditd_printk_skb: 134 callbacks suppressed Sep 11 18:08:31.357198 kernel: audit: type=1325 audit(1789150111.355:788): table=raw:93 family=2 entries=1 op=nft_unregister_rule pid=5811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:31.355000 audit[5811]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcd92432e0 a2=0 a3=0 items=0 ppid=2991 pid=5811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.363014 kernel: audit: type=1300 audit(1789150111.355:788): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcd92432e0 a2=0 a3=0 items=0 ppid=2991 pid=5811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.355000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:31.365884 kernel: audit: type=1327 audit(1789150111.355:788): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:31.366592 systemd-networkd[2304]: vethf7c3e8b: Link DOWN Sep 11 18:08:31.367487 kernel: docker0: port 1(vethf7c3e8b) entered disabled state Sep 11 18:08:31.370471 kernel: vethf7c3e8b (unregistering): left allmulticast mode Sep 11 18:08:31.370520 kernel: vethf7c3e8b (unregistering): left promiscuous mode Sep 11 18:08:31.370663 kernel: docker0: port 1(vethf7c3e8b) entered disabled state Sep 11 18:08:31.366000 audit: ANOM_PROMISCUOUS dev=vethf7c3e8b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:31.372571 kernel: audit: type=1700 audit(1789150111.366:789): dev=vethf7c3e8b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:31.366000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8110660e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.366000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:31.386219 systemd[1]: run-docker-netns-fc04d23832ad.mount: Deactivated successfully. Sep 11 18:08:31.388613 kernel: audit: type=1300 audit(1789150111.366:789): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8110660e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.388664 kernel: audit: type=1327 audit(1789150111.366:789): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:31.391145 systemd[1]: var-lib-docker-rootfs-overlayfs-03fad4071a7023f47a3c138cc20e72b97f2cf11794a5825af7afb425d538826a.mount: Deactivated successfully. Sep 11 18:08:31.402000 audit: BPF prog-id=191 op=UNLOAD Sep 11 18:08:31.402000 audit: BPF prog-id=195 op=UNLOAD Sep 11 18:08:31.405718 kernel: audit: type=1334 audit(1789150111.402:790): prog-id=191 op=UNLOAD Sep 11 18:08:31.405756 kernel: audit: type=1334 audit(1789150111.402:791): prog-id=195 op=UNLOAD Sep 11 18:08:31.526376 systemd[1]: tmp-containerd\x2dmount842902687.mount: Deactivated successfully. Sep 11 18:08:31.606433 containerd[2527]: time="2026-09-11T18:08:31.606364492Z" level=info msg="connecting to shim 0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705" address="unix:///run/containerd/s/524bd757c29e81e8c07151caaaaa667f1224b5f505c5bfc02ffabf38db4f8be3" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:31.636170 systemd[1]: Started docker-0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705.scope - libcontainer container 0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705. Sep 11 18:08:31.644000 audit: BPF prog-id=196 op=LOAD Sep 11 18:08:31.645000 audit: BPF prog-id=197 op=LOAD Sep 11 18:08:31.647987 kernel: audit: type=1334 audit(1789150111.644:792): prog-id=196 op=LOAD Sep 11 18:08:31.648052 kernel: audit: type=1334 audit(1789150111.645:793): prog-id=197 op=LOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=310fd86dffd8 a2=98 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.645000 audit: BPF prog-id=197 op=UNLOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.645000 audit: BPF prog-id=198 op=LOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=310fd86e0290 a2=98 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.645000 audit: BPF prog-id=199 op=LOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=310fd86dffe8 a2=98 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.645000 audit: BPF prog-id=199 op=UNLOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.645000 audit: BPF prog-id=198 op=UNLOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.645000 audit: BPF prog-id=200 op=LOAD Sep 11 18:08:31.645000 audit[5840]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=310fd86e04f0 a2=98 a3=0 items=0 ppid=5829 pid=5840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30636361623163656262373737323734376165383932613634 Sep 11 18:08:31.666000 audit: ANOM_PROMISCUOUS dev=vethb861bd6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:31.666000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca810d4ccc0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.666000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:31.672424 kernel: docker0: port 1(vethb861bd6) entered blocking state Sep 11 18:08:31.672451 kernel: docker0: port 1(vethb861bd6) entered disabled state Sep 11 18:08:31.672473 kernel: vethb861bd6: entered allmulticast mode Sep 11 18:08:31.672493 kernel: vethb861bd6: entered promiscuous mode Sep 11 18:08:31.673408 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:31.673000 audit[5860]: NETFILTER_CFG table=raw:94 family=2 entries=1 op=nft_register_rule pid=5860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:31.673000 audit[5860]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff0720b6c0 a2=0 a3=0 items=0 ppid=2991 pid=5860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:31.673000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:31.675570 systemd-networkd[2304]: vethb861bd6: Link UP Sep 11 18:08:31.687241 kernel: eth0: renamed from veth5b9378a Sep 11 18:08:31.687302 kernel: docker0: port 1(vethb861bd6) entered blocking state Sep 11 18:08:31.688164 kernel: docker0: port 1(vethb861bd6) entered forwarding state Sep 11 18:08:31.688465 systemd-networkd[2304]: vethb861bd6: Gained carrier Sep 11 18:08:31.689028 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:31.697187 dockerd[2991]: time="2026-09-11T18:08:31.697015609Z" level=info msg="sbJoin: gwep4 ''->'3bb529e17c1f', gwep6 ''->''" eid=3bb529e17c1f ep=gracious_lederberg net=bridge nid=ad3b593e9776 Sep 11 18:08:32.723869 systemd[1]: docker-0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705.scope: Deactivated successfully. Sep 11 18:08:32.740446 dockerd[2991]: time="2026-09-11T18:08:32.740401142Z" level=info msg="ignoring event" container=0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:32.740844 containerd[2527]: time="2026-09-11T18:08:32.740755759Z" level=info msg="shim disconnected" id=0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705 namespace=moby Sep 11 18:08:32.740844 containerd[2527]: time="2026-09-11T18:08:32.740788015Z" level=info msg="cleaning up after shim disconnected" id=0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705 namespace=moby Sep 11 18:08:32.740844 containerd[2527]: time="2026-09-11T18:08:32.740796252Z" level=info msg="cleaning up dead shim" id=0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705 namespace=moby Sep 11 18:08:32.767537 systemd-networkd[2304]: vethb861bd6: Lost carrier Sep 11 18:08:32.768425 kernel: docker0: port 1(vethb861bd6) entered disabled state Sep 11 18:08:32.768466 kernel: veth5b9378a: renamed from eth0 Sep 11 18:08:32.783000 audit[5893]: NETFILTER_CFG table=raw:95 family=2 entries=1 op=nft_unregister_rule pid=5893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:32.783000 audit[5893]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffca4d4b9e0 a2=0 a3=0 items=0 ppid=2991 pid=5893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:32.783000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:32.787734 systemd-networkd[2304]: vethb861bd6: Link DOWN Sep 11 18:08:32.789025 kernel: docker0: port 1(vethb861bd6) entered disabled state Sep 11 18:08:32.791126 kernel: vethb861bd6 (unregistering): left allmulticast mode Sep 11 18:08:32.791183 kernel: vethb861bd6 (unregistering): left promiscuous mode Sep 11 18:08:32.786000 audit: ANOM_PROMISCUOUS dev=vethb861bd6 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:32.792241 kernel: docker0: port 1(vethb861bd6) entered disabled state Sep 11 18:08:32.786000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca810ac76c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:32.786000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:32.807502 systemd[1]: run-docker-netns-6b821baa286c.mount: Deactivated successfully. Sep 11 18:08:32.809909 systemd[1]: var-lib-docker-rootfs-overlayfs-0ccab1cebb7772747ae892a6410451cc6b1e11b0ba0728b23d1e34b01603a705.mount: Deactivated successfully. Sep 11 18:08:32.824000 audit: BPF prog-id=196 op=UNLOAD Sep 11 18:08:32.824000 audit: BPF prog-id=200 op=UNLOAD Sep 11 18:08:32.939422 systemd[1]: tmp-containerd\x2dmount2498262140.mount: Deactivated successfully. Sep 11 18:08:33.012469 containerd[2527]: time="2026-09-11T18:08:33.011488119Z" level=info msg="connecting to shim 5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67" address="unix:///run/containerd/s/67ec85acbae8d26082606528ca2e1134cad40c46976eb6faac8764d025fe71fd" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:33.034186 systemd[1]: Started docker-5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67.scope - libcontainer container 5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67. Sep 11 18:08:33.042000 audit: BPF prog-id=201 op=LOAD Sep 11 18:08:33.042000 audit: BPF prog-id=202 op=LOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f0d42a8dfd8 a2=98 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.042000 audit: BPF prog-id=202 op=UNLOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.042000 audit: BPF prog-id=203 op=LOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f0d42a8e290 a2=98 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.042000 audit: BPF prog-id=204 op=LOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3f0d42a8dfe8 a2=98 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.042000 audit: BPF prog-id=204 op=UNLOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.042000 audit: BPF prog-id=203 op=UNLOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.042000 audit: BPF prog-id=205 op=LOAD Sep 11 18:08:33.042000 audit[5923]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f0d42a8e4f0 a2=98 a3=0 items=0 ppid=5911 pid=5923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35613639303033303035303966666561643862356135323134 Sep 11 18:08:33.063466 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:33.065787 kernel: docker0: port 1(veth496b7f0) entered blocking state Sep 11 18:08:33.065855 kernel: docker0: port 1(veth496b7f0) entered disabled state Sep 11 18:08:33.067191 kernel: veth496b7f0: entered allmulticast mode Sep 11 18:08:33.068119 kernel: veth496b7f0: entered promiscuous mode Sep 11 18:08:33.062000 audit: ANOM_PROMISCUOUS dev=veth496b7f0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:33.062000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f11530 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.062000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:33.069000 audit[5944]: NETFILTER_CFG table=raw:96 family=2 entries=1 op=nft_register_rule pid=5944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:33.069000 audit[5944]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdd82f74e0 a2=0 a3=0 items=0 ppid=2991 pid=5944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:33.069000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:33.070597 systemd-networkd[2304]: veth496b7f0: Link UP Sep 11 18:08:33.078812 kernel: eth0: renamed from veth782a476 Sep 11 18:08:33.078862 kernel: docker0: port 1(veth496b7f0) entered blocking state Sep 11 18:08:33.080307 kernel: docker0: port 1(veth496b7f0) entered forwarding state Sep 11 18:08:33.080561 systemd-networkd[2304]: veth496b7f0: Gained carrier Sep 11 18:08:33.080968 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:33.090027 dockerd[2991]: time="2026-09-11T18:08:33.088640553Z" level=info msg="sbJoin: gwep4 ''->'8b3fafba01b1', gwep6 ''->''" eid=8b3fafba01b1 ep=inspiring_satoshi net=bridge nid=ad3b593e9776 Sep 11 18:08:34.115818 systemd[1]: docker-5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67.scope: Deactivated successfully. Sep 11 18:08:34.129106 containerd[2527]: time="2026-09-11T18:08:34.129066857Z" level=info msg="shim disconnected" id=5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67 namespace=moby Sep 11 18:08:34.129106 containerd[2527]: time="2026-09-11T18:08:34.129096296Z" level=info msg="cleaning up after shim disconnected" id=5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67 namespace=moby Sep 11 18:08:34.129106 containerd[2527]: time="2026-09-11T18:08:34.129104571Z" level=info msg="cleaning up dead shim" id=5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67 namespace=moby Sep 11 18:08:34.129445 dockerd[2991]: time="2026-09-11T18:08:34.128996145Z" level=info msg="ignoring event" container=5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:34.153331 systemd-networkd[2304]: veth496b7f0: Lost carrier Sep 11 18:08:34.154020 kernel: docker0: port 1(veth496b7f0) entered disabled state Sep 11 18:08:34.154118 kernel: veth782a476: renamed from eth0 Sep 11 18:08:34.169000 audit[5974]: NETFILTER_CFG table=raw:97 family=2 entries=1 op=nft_unregister_rule pid=5974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:34.169000 audit[5974]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdc2774890 a2=0 a3=0 items=0 ppid=2991 pid=5974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:34.174348 systemd-networkd[2304]: veth496b7f0: Link DOWN Sep 11 18:08:34.176022 kernel: docker0: port 1(veth496b7f0) entered disabled state Sep 11 18:08:34.178329 kernel: veth496b7f0 (unregistering): left allmulticast mode Sep 11 18:08:34.178389 kernel: veth496b7f0 (unregistering): left promiscuous mode Sep 11 18:08:34.173000 audit: ANOM_PROMISCUOUS dev=veth496b7f0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:34.179946 kernel: docker0: port 1(veth496b7f0) entered disabled state Sep 11 18:08:34.173000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dba220 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.173000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:34.190501 systemd[1]: run-docker-netns-2330db9d8ec5.mount: Deactivated successfully. Sep 11 18:08:34.201920 systemd[1]: var-lib-docker-rootfs-overlayfs-5a6900300509ffead8b5a5214e16e5c9905c7be6f9c6a862cf250b8e056b6f67.mount: Deactivated successfully. Sep 11 18:08:34.202000 audit: BPF prog-id=201 op=UNLOAD Sep 11 18:08:34.202000 audit: BPF prog-id=205 op=UNLOAD Sep 11 18:08:34.323551 systemd[1]: tmp-containerd\x2dmount359237551.mount: Deactivated successfully. Sep 11 18:08:34.407059 containerd[2527]: time="2026-09-11T18:08:34.406946333Z" level=info msg="connecting to shim 8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697" address="unix:///run/containerd/s/5c2e13c1b1cc77b8602d2d7e16a3786b81575472f2209eebb17fbebae0e76ef4" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:34.423177 systemd[1]: Started docker-8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697.scope - libcontainer container 8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697. Sep 11 18:08:34.431000 audit: BPF prog-id=206 op=LOAD Sep 11 18:08:34.431000 audit: BPF prog-id=207 op=LOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f6d1c68dfd8 a2=98 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.431000 audit: BPF prog-id=207 op=UNLOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.431000 audit: BPF prog-id=208 op=LOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f6d1c68e290 a2=98 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.431000 audit: BPF prog-id=209 op=LOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3f6d1c68dfe8 a2=98 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.431000 audit: BPF prog-id=209 op=UNLOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.431000 audit: BPF prog-id=208 op=UNLOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.431000 audit: BPF prog-id=210 op=LOAD Sep 11 18:08:34.431000 audit[6004]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3f6d1c68e4f0 a2=98 a3=0 items=0 ppid=5992 pid=6004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663262393332333763383066313830343436306432663862 Sep 11 18:08:34.456093 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:34.457306 kernel: docker0: port 1(veth46fc892) entered blocking state Sep 11 18:08:34.457360 kernel: docker0: port 1(veth46fc892) entered disabled state Sep 11 18:08:34.459497 kernel: veth46fc892: entered allmulticast mode Sep 11 18:08:34.454000 audit: ANOM_PROMISCUOUS dev=veth46fc892 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:34.459604 kernel: veth46fc892: entered promiscuous mode Sep 11 18:08:34.454000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a00f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.454000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:34.461000 audit[6026]: NETFILTER_CFG table=raw:98 family=2 entries=1 op=nft_register_rule pid=6026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:34.461000 audit[6026]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe172702a0 a2=0 a3=0 items=0 ppid=2991 pid=6026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:34.461000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:34.463382 systemd-networkd[2304]: veth46fc892: Link UP Sep 11 18:08:34.477025 kernel: eth0: renamed from vethdd28513 Sep 11 18:08:34.479022 kernel: docker0: port 1(veth46fc892) entered blocking state Sep 11 18:08:34.479071 kernel: docker0: port 1(veth46fc892) entered forwarding state Sep 11 18:08:34.479105 systemd-networkd[2304]: veth46fc892: Gained carrier Sep 11 18:08:34.479344 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:34.489028 dockerd[2991]: time="2026-09-11T18:08:34.488236289Z" level=info msg="sbJoin: gwep4 ''->'dc51f67d9814', gwep6 ''->''" eid=dc51f67d9814 ep=brave_beaver net=bridge nid=ad3b593e9776 Sep 11 18:08:35.512824 systemd[1]: docker-8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697.scope: Deactivated successfully. Sep 11 18:08:35.525131 dockerd[2991]: time="2026-09-11T18:08:35.525098782Z" level=info msg="ignoring event" container=8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:35.525524 containerd[2527]: time="2026-09-11T18:08:35.525238076Z" level=info msg="shim disconnected" id=8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697 namespace=moby Sep 11 18:08:35.525524 containerd[2527]: time="2026-09-11T18:08:35.525267171Z" level=info msg="cleaning up after shim disconnected" id=8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697 namespace=moby Sep 11 18:08:35.525524 containerd[2527]: time="2026-09-11T18:08:35.525278370Z" level=info msg="cleaning up dead shim" id=8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697 namespace=moby Sep 11 18:08:35.548577 systemd-networkd[2304]: veth46fc892: Lost carrier Sep 11 18:08:35.549324 kernel: docker0: port 1(veth46fc892) entered disabled state Sep 11 18:08:35.549348 kernel: vethdd28513: renamed from eth0 Sep 11 18:08:35.582000 audit[6056]: NETFILTER_CFG table=raw:99 family=2 entries=1 op=nft_unregister_rule pid=6056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:35.582000 audit[6056]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdeb56b330 a2=0 a3=0 items=0 ppid=2991 pid=6056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.582000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:35.588355 systemd-networkd[2304]: veth46fc892: Link DOWN Sep 11 18:08:35.590021 kernel: docker0: port 1(veth46fc892) entered disabled state Sep 11 18:08:35.590070 kernel: veth46fc892 (unregistering): left allmulticast mode Sep 11 18:08:35.592749 kernel: veth46fc892 (unregistering): left promiscuous mode Sep 11 18:08:35.587000 audit: ANOM_PROMISCUOUS dev=veth46fc892 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:35.594067 kernel: docker0: port 1(veth46fc892) entered disabled state Sep 11 18:08:35.587000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbbcc0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.587000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:35.605948 systemd[1]: run-docker-netns-f288066fab5a.mount: Deactivated successfully. Sep 11 18:08:35.612347 systemd[1]: var-lib-docker-rootfs-overlayfs-8f2b93237c80f1804460d2f8b996290dd211a757a431cd8813fbf3f120fb4697.mount: Deactivated successfully. Sep 11 18:08:35.619000 audit: BPF prog-id=206 op=UNLOAD Sep 11 18:08:35.619000 audit: BPF prog-id=210 op=UNLOAD Sep 11 18:08:35.820781 containerd[2527]: time="2026-09-11T18:08:35.820403673Z" level=info msg="connecting to shim 328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b" address="unix:///run/containerd/s/5d7a8f1c085c77d8d97b69165014799d4340fe6cf0fc786c1ffe9a59c1251b0d" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:35.846176 systemd[1]: Started docker-328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b.scope - libcontainer container 328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b. Sep 11 18:08:35.854000 audit: BPF prog-id=211 op=LOAD Sep 11 18:08:35.854000 audit: BPF prog-id=212 op=LOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=a82689fbfd8 a2=98 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.854000 audit: BPF prog-id=212 op=UNLOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.854000 audit: BPF prog-id=213 op=LOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=a82689fc290 a2=98 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.854000 audit: BPF prog-id=214 op=LOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=a82689fbfe8 a2=98 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.854000 audit: BPF prog-id=214 op=UNLOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.854000 audit: BPF prog-id=213 op=UNLOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.854000 audit: BPF prog-id=215 op=LOAD Sep 11 18:08:35.854000 audit[6085]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=a82689fc4f0 a2=98 a3=0 items=0 ppid=6074 pid=6085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323865633561353662343633336663626632393364653463 Sep 11 18:08:35.875185 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:35.876952 kernel: docker0: port 1(veth28ea9cb) entered blocking state Sep 11 18:08:35.876976 kernel: docker0: port 1(veth28ea9cb) entered disabled state Sep 11 18:08:35.877046 kernel: veth28ea9cb: entered allmulticast mode Sep 11 18:08:35.878377 kernel: veth28ea9cb: entered promiscuous mode Sep 11 18:08:35.873000 audit: ANOM_PROMISCUOUS dev=veth28ea9cb prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:35.873000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e6e10 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.873000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:35.879000 audit[6106]: NETFILTER_CFG table=raw:100 family=2 entries=1 op=nft_register_rule pid=6106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:35.879000 audit[6106]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff887bae20 a2=0 a3=0 items=0 ppid=2991 pid=6106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:35.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:35.881677 systemd-networkd[2304]: veth28ea9cb: Link UP Sep 11 18:08:35.894022 kernel: eth0: renamed from veth4c52958 Sep 11 18:08:35.896024 kernel: docker0: port 1(veth28ea9cb) entered blocking state Sep 11 18:08:35.896080 kernel: docker0: port 1(veth28ea9cb) entered forwarding state Sep 11 18:08:35.896342 systemd-networkd[2304]: veth28ea9cb: Gained carrier Sep 11 18:08:35.896721 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:35.903761 dockerd[2991]: time="2026-09-11T18:08:35.903729880Z" level=info msg="sbJoin: gwep4 ''->'5a88cdcb020e', gwep6 ''->''" eid=5a88cdcb020e ep=silly_sinoussi net=bridge nid=ad3b593e9776 Sep 11 18:08:36.928317 systemd[1]: docker-328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b.scope: Deactivated successfully. Sep 11 18:08:36.941060 dockerd[2991]: time="2026-09-11T18:08:36.940986880Z" level=info msg="ignoring event" container=328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:36.941478 containerd[2527]: time="2026-09-11T18:08:36.941447466Z" level=info msg="shim disconnected" id=328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b namespace=moby Sep 11 18:08:36.941478 containerd[2527]: time="2026-09-11T18:08:36.941477195Z" level=info msg="cleaning up after shim disconnected" id=328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b namespace=moby Sep 11 18:08:36.941775 containerd[2527]: time="2026-09-11T18:08:36.941485115Z" level=info msg="cleaning up dead shim" id=328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b namespace=moby Sep 11 18:08:36.963798 systemd-networkd[2304]: veth28ea9cb: Lost carrier Sep 11 18:08:36.964799 kernel: docker0: port 1(veth28ea9cb) entered disabled state Sep 11 18:08:36.964830 kernel: veth4c52958: renamed from eth0 Sep 11 18:08:36.986000 audit[6135]: NETFILTER_CFG table=raw:101 family=2 entries=1 op=nft_unregister_rule pid=6135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:36.989345 kernel: kauditd_printk_skb: 134 callbacks suppressed Sep 11 18:08:36.989399 kernel: audit: type=1325 audit(1789150116.986:844): table=raw:101 family=2 entries=1 op=nft_unregister_rule pid=6135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:36.986000 audit[6135]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fffdd4494c0 a2=0 a3=0 items=0 ppid=2991 pid=6135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:36.992446 kernel: audit: type=1300 audit(1789150116.986:844): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fffdd4494c0 a2=0 a3=0 items=0 ppid=2991 pid=6135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:36.986000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:36.993226 kernel: audit: type=1327 audit(1789150116.986:844): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:36.997453 systemd-networkd[2304]: veth28ea9cb: Link DOWN Sep 11 18:08:37.000730 kernel: docker0: port 1(veth28ea9cb) entered disabled state Sep 11 18:08:37.000782 kernel: veth28ea9cb (unregistering): left allmulticast mode Sep 11 18:08:37.001606 kernel: veth28ea9cb (unregistering): left promiscuous mode Sep 11 18:08:36.996000 audit: ANOM_PROMISCUOUS dev=veth28ea9cb prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:37.004577 kernel: docker0: port 1(veth28ea9cb) entered disabled state Sep 11 18:08:37.004603 kernel: audit: type=1700 audit(1789150116.996:845): dev=veth28ea9cb prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:36.996000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77320 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:36.996000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:37.018730 systemd[1]: run-docker-netns-5891b232d269.mount: Deactivated successfully. Sep 11 18:08:37.021146 kernel: audit: type=1300 audit(1789150116.996:845): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77320 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.021196 kernel: audit: type=1327 audit(1789150116.996:845): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:37.026214 systemd[1]: var-lib-docker-rootfs-overlayfs-328ec5a56b4633fcbf293de4c7fb34d376fb6e6ca517a6bd04dceb87d159943b.mount: Deactivated successfully. Sep 11 18:08:37.033000 audit: BPF prog-id=211 op=UNLOAD Sep 11 18:08:37.033000 audit: BPF prog-id=215 op=UNLOAD Sep 11 18:08:37.036365 kernel: audit: type=1334 audit(1789150117.033:846): prog-id=211 op=UNLOAD Sep 11 18:08:37.036407 kernel: audit: type=1334 audit(1789150117.033:847): prog-id=215 op=UNLOAD Sep 11 18:08:37.163258 systemd[1]: tmp-containerd\x2dmount3506538803.mount: Deactivated successfully. Sep 11 18:08:37.233496 containerd[2527]: time="2026-09-11T18:08:37.233401979Z" level=info msg="connecting to shim 0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692" address="unix:///run/containerd/s/d93ee6624cb720d6e4333e1c03d3d9ff7eff105ea224ef59019d8bc08d370145" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:37.253203 systemd[1]: Started docker-0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692.scope - libcontainer container 0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692. Sep 11 18:08:37.260000 audit: BPF prog-id=216 op=LOAD Sep 11 18:08:37.262000 audit: BPF prog-id=217 op=LOAD Sep 11 18:08:37.264889 kernel: audit: type=1334 audit(1789150117.260:848): prog-id=216 op=LOAD Sep 11 18:08:37.264940 kernel: audit: type=1334 audit(1789150117.262:849): prog-id=217 op=LOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=865aa8f5fd8 a2=98 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.262000 audit: BPF prog-id=217 op=UNLOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.262000 audit: BPF prog-id=218 op=LOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=865aa8f6290 a2=98 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.262000 audit: BPF prog-id=219 op=LOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=865aa8f5fe8 a2=98 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.262000 audit: BPF prog-id=219 op=UNLOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.262000 audit: BPF prog-id=218 op=UNLOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.262000 audit: BPF prog-id=220 op=LOAD Sep 11 18:08:37.262000 audit[6165]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=865aa8f64f0 a2=98 a3=0 items=0 ppid=6153 pid=6165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30313737663134383232626666323261386663326630366363 Sep 11 18:08:37.289582 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:37.292135 kernel: docker0: port 1(vethb183c05) entered blocking state Sep 11 18:08:37.292166 kernel: docker0: port 1(vethb183c05) entered disabled state Sep 11 18:08:37.294049 kernel: vethb183c05: entered allmulticast mode Sep 11 18:08:37.294168 kernel: vethb183c05: entered promiscuous mode Sep 11 18:08:37.287000 audit: ANOM_PROMISCUOUS dev=vethb183c05 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:37.287000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f88000 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.287000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:37.298000 audit[6186]: NETFILTER_CFG table=raw:102 family=2 entries=1 op=nft_register_rule pid=6186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:37.298000 audit[6186]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd8a301a20 a2=0 a3=0 items=0 ppid=2991 pid=6186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:37.298000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:37.299779 systemd-networkd[2304]: vethb183c05: Link UP Sep 11 18:08:37.306019 kernel: eth0: renamed from veth01c8ede Sep 11 18:08:37.307677 kernel: docker0: port 1(vethb183c05) entered blocking state Sep 11 18:08:37.307728 kernel: docker0: port 1(vethb183c05) entered forwarding state Sep 11 18:08:37.307766 systemd-networkd[2304]: vethb183c05: Gained carrier Sep 11 18:08:37.308216 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:37.316112 dockerd[2991]: time="2026-09-11T18:08:37.316081959Z" level=info msg="sbJoin: gwep4 ''->'42442518c063', gwep6 ''->''" eid=42442518c063 ep=relaxed_chandrasekhar net=bridge nid=ad3b593e9776 Sep 11 18:08:38.337733 systemd[1]: docker-0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692.scope: Deactivated successfully. Sep 11 18:08:38.350484 dockerd[2991]: time="2026-09-11T18:08:38.350441395Z" level=info msg="ignoring event" container=0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:38.350789 containerd[2527]: time="2026-09-11T18:08:38.350361860Z" level=info msg="shim disconnected" id=0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692 namespace=moby Sep 11 18:08:38.350789 containerd[2527]: time="2026-09-11T18:08:38.350757607Z" level=info msg="cleaning up after shim disconnected" id=0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692 namespace=moby Sep 11 18:08:38.350789 containerd[2527]: time="2026-09-11T18:08:38.350767455Z" level=info msg="cleaning up dead shim" id=0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692 namespace=moby Sep 11 18:08:38.374721 systemd-networkd[2304]: vethb183c05: Lost carrier Sep 11 18:08:38.375166 kernel: docker0: port 1(vethb183c05) entered disabled state Sep 11 18:08:38.376023 kernel: veth01c8ede: renamed from eth0 Sep 11 18:08:38.387000 audit[6216]: NETFILTER_CFG table=raw:103 family=2 entries=1 op=nft_unregister_rule pid=6216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:38.387000 audit[6216]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe61dde980 a2=0 a3=0 items=0 ppid=2991 pid=6216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.387000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:38.398493 systemd-networkd[2304]: vethb183c05: Link DOWN Sep 11 18:08:38.400019 kernel: docker0: port 1(vethb183c05) entered disabled state Sep 11 18:08:38.397000 audit: ANOM_PROMISCUOUS dev=vethb183c05 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:38.403703 kernel: vethb183c05 (unregistering): left allmulticast mode Sep 11 18:08:38.403731 kernel: vethb183c05 (unregistering): left promiscuous mode Sep 11 18:08:38.403748 kernel: docker0: port 1(vethb183c05) entered disabled state Sep 11 18:08:38.397000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77a40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.397000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:38.420640 systemd[1]: run-docker-netns-1a32cf3923df.mount: Deactivated successfully. Sep 11 18:08:38.423952 systemd[1]: var-lib-docker-rootfs-overlayfs-0177f14822bff22a8fc2f06cc7f64503fff831e39ebc65ef7f45e41e869e2692.mount: Deactivated successfully. Sep 11 18:08:38.433000 audit: BPF prog-id=216 op=UNLOAD Sep 11 18:08:38.433000 audit: BPF prog-id=220 op=UNLOAD Sep 11 18:08:38.560923 systemd[1]: tmp-containerd\x2dmount3647405728.mount: Deactivated successfully. Sep 11 18:08:38.663408 containerd[2527]: time="2026-09-11T18:08:38.663369604Z" level=info msg="connecting to shim 398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58" address="unix:///run/containerd/s/ebcbf2b3054bb5738c6539926f7c5a5ba7a11915891851b04613c131fff6d22c" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:38.687198 systemd[1]: Started docker-398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58.scope - libcontainer container 398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58. Sep 11 18:08:38.695000 audit: BPF prog-id=221 op=LOAD Sep 11 18:08:38.695000 audit: BPF prog-id=222 op=LOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e301a7b1fd8 a2=98 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.695000 audit: BPF prog-id=222 op=UNLOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.695000 audit: BPF prog-id=223 op=LOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e301a7b2290 a2=98 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.695000 audit: BPF prog-id=224 op=LOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1e301a7b1fe8 a2=98 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.695000 audit: BPF prog-id=224 op=UNLOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.695000 audit: BPF prog-id=223 op=UNLOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.695000 audit: BPF prog-id=225 op=LOAD Sep 11 18:08:38.695000 audit[6245]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e301a7b24f0 a2=98 a3=0 items=0 ppid=6234 pid=6245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.695000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33393866663732336635306134356661323664316363383962 Sep 11 18:08:38.720111 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:38.721764 kernel: docker0: port 1(veth50c2b87) entered blocking state Sep 11 18:08:38.721799 kernel: docker0: port 1(veth50c2b87) entered disabled state Sep 11 18:08:38.722813 kernel: veth50c2b87: entered allmulticast mode Sep 11 18:08:38.718000 audit: ANOM_PROMISCUOUS dev=veth50c2b87 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:38.723847 kernel: veth50c2b87: entered promiscuous mode Sep 11 18:08:38.718000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111cee70 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.718000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:38.725000 audit[6266]: NETFILTER_CFG table=raw:104 family=2 entries=1 op=nft_register_rule pid=6266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:38.725000 audit[6266]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe8073fe90 a2=0 a3=0 items=0 ppid=2991 pid=6266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:38.725000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:38.726913 systemd-networkd[2304]: veth50c2b87: Link UP Sep 11 18:08:38.736257 kernel: eth0: renamed from vethbe638ca Sep 11 18:08:38.736308 kernel: docker0: port 1(veth50c2b87) entered blocking state Sep 11 18:08:38.736307 systemd-networkd[2304]: veth50c2b87: Gained carrier Sep 11 18:08:38.736379 kernel: docker0: port 1(veth50c2b87) entered forwarding state Sep 11 18:08:38.736747 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:38.746305 dockerd[2991]: time="2026-09-11T18:08:38.746276600Z" level=info msg="sbJoin: gwep4 ''->'c551b9241897', gwep6 ''->''" eid=c551b9241897 ep=vigilant_pare net=bridge nid=ad3b593e9776 Sep 11 18:08:39.769277 systemd[1]: docker-398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58.scope: Deactivated successfully. Sep 11 18:08:39.781191 dockerd[2991]: time="2026-09-11T18:08:39.781103516Z" level=info msg="ignoring event" container=398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:39.782026 containerd[2527]: time="2026-09-11T18:08:39.781645362Z" level=info msg="shim disconnected" id=398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58 namespace=moby Sep 11 18:08:39.782026 containerd[2527]: time="2026-09-11T18:08:39.781683880Z" level=info msg="cleaning up after shim disconnected" id=398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58 namespace=moby Sep 11 18:08:39.782026 containerd[2527]: time="2026-09-11T18:08:39.781690854Z" level=info msg="cleaning up dead shim" id=398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58 namespace=moby Sep 11 18:08:39.804420 systemd-networkd[2304]: veth50c2b87: Lost carrier Sep 11 18:08:39.805192 kernel: docker0: port 1(veth50c2b87) entered disabled state Sep 11 18:08:39.805222 kernel: vethbe638ca: renamed from eth0 Sep 11 18:08:39.824000 audit[6297]: NETFILTER_CFG table=raw:105 family=2 entries=1 op=nft_unregister_rule pid=6297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:39.824000 audit[6297]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe7c66e410 a2=0 a3=0 items=0 ppid=2991 pid=6297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:39.824000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:39.829375 systemd-networkd[2304]: veth50c2b87: Link DOWN Sep 11 18:08:39.831029 kernel: docker0: port 1(veth50c2b87) entered disabled state Sep 11 18:08:39.833340 kernel: veth50c2b87 (unregistering): left allmulticast mode Sep 11 18:08:39.833689 kernel: veth50c2b87 (unregistering): left promiscuous mode Sep 11 18:08:39.833757 kernel: docker0: port 1(veth50c2b87) entered disabled state Sep 11 18:08:39.828000 audit: ANOM_PROMISCUOUS dev=veth50c2b87 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:39.828000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8114b57a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:39.828000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:39.844172 systemd[1]: run-docker-netns-ebb56b0897cc.mount: Deactivated successfully. Sep 11 18:08:39.850852 systemd[1]: var-lib-docker-rootfs-overlayfs-398ff723f50a45fa26d1cc89b19c6769ed9e58e5bc59571f94237dcfe4cd0d58.mount: Deactivated successfully. Sep 11 18:08:39.854000 audit: BPF prog-id=221 op=UNLOAD Sep 11 18:08:39.854000 audit: BPF prog-id=225 op=UNLOAD Sep 11 18:08:40.013517 containerd[2527]: time="2026-09-11T18:08:40.013464153Z" level=info msg="connecting to shim 4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485" address="unix:///run/containerd/s/20de9964ef0e9d2edb3286e4c9c6f825206b9ede5497d7876970b99bcfa8e803" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:40.036176 systemd[1]: Started docker-4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485.scope - libcontainer container 4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485. Sep 11 18:08:40.044000 audit: BPF prog-id=226 op=LOAD Sep 11 18:08:40.045000 audit: BPF prog-id=227 op=LOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d4288423fd8 a2=98 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.045000 audit: BPF prog-id=227 op=UNLOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.045000 audit: BPF prog-id=228 op=LOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d4288424290 a2=98 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.045000 audit: BPF prog-id=229 op=LOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3d4288423fe8 a2=98 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.045000 audit: BPF prog-id=229 op=UNLOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.045000 audit: BPF prog-id=228 op=UNLOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.045000 audit: BPF prog-id=230 op=LOAD Sep 11 18:08:40.045000 audit[6325]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d42884244f0 a2=98 a3=0 items=0 ppid=6313 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623237663930646333623561616235343739363765326535 Sep 11 18:08:40.067753 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:40.070573 kernel: docker0: port 1(veth9ca8450) entered blocking state Sep 11 18:08:40.070610 kernel: docker0: port 1(veth9ca8450) entered disabled state Sep 11 18:08:40.071543 kernel: veth9ca8450: entered allmulticast mode Sep 11 18:08:40.066000 audit: ANOM_PROMISCUOUS dev=veth9ca8450 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:40.072667 kernel: veth9ca8450: entered promiscuous mode Sep 11 18:08:40.066000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812077b60 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.066000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:40.075000 audit[6348]: NETFILTER_CFG table=raw:106 family=2 entries=1 op=nft_register_rule pid=6348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:40.075000 audit[6348]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe5f707610 a2=0 a3=0 items=0 ppid=2991 pid=6348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:40.075000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:40.077165 systemd-networkd[2304]: veth9ca8450: Link UP Sep 11 18:08:40.094026 kernel: eth0: renamed from veth055f237 Sep 11 18:08:40.095908 kernel: docker0: port 1(veth9ca8450) entered blocking state Sep 11 18:08:40.095958 kernel: docker0: port 1(veth9ca8450) entered forwarding state Sep 11 18:08:40.095991 systemd-networkd[2304]: veth9ca8450: Gained carrier Sep 11 18:08:40.096461 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:40.103832 dockerd[2991]: time="2026-09-11T18:08:40.103802071Z" level=info msg="sbJoin: gwep4 ''->'7f65c063c90a', gwep6 ''->''" eid=7f65c063c90a ep=mystifying_brattain net=bridge nid=ad3b593e9776 Sep 11 18:08:41.126440 systemd[1]: docker-4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485.scope: Deactivated successfully. Sep 11 18:08:41.138665 dockerd[2991]: time="2026-09-11T18:08:41.138628932Z" level=info msg="ignoring event" container=4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:41.138983 containerd[2527]: time="2026-09-11T18:08:41.138726118Z" level=info msg="shim disconnected" id=4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485 namespace=moby Sep 11 18:08:41.138983 containerd[2527]: time="2026-09-11T18:08:41.138760528Z" level=info msg="cleaning up after shim disconnected" id=4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485 namespace=moby Sep 11 18:08:41.138983 containerd[2527]: time="2026-09-11T18:08:41.138771845Z" level=info msg="cleaning up dead shim" id=4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485 namespace=moby Sep 11 18:08:41.163290 systemd-networkd[2304]: veth9ca8450: Lost carrier Sep 11 18:08:41.164288 kernel: docker0: port 1(veth9ca8450) entered disabled state Sep 11 18:08:41.164316 kernel: veth055f237: renamed from eth0 Sep 11 18:08:41.176000 audit[6379]: NETFILTER_CFG table=raw:107 family=2 entries=1 op=nft_unregister_rule pid=6379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:41.176000 audit[6379]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcd7055450 a2=0 a3=0 items=0 ppid=2991 pid=6379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.176000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:41.187397 systemd-networkd[2304]: veth9ca8450: Link DOWN Sep 11 18:08:41.189330 kernel: docker0: port 1(veth9ca8450) entered disabled state Sep 11 18:08:41.189384 kernel: veth9ca8450 (unregistering): left allmulticast mode Sep 11 18:08:41.191975 kernel: veth9ca8450 (unregistering): left promiscuous mode Sep 11 18:08:41.186000 audit: ANOM_PROMISCUOUS dev=veth9ca8450 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:41.193187 kernel: docker0: port 1(veth9ca8450) entered disabled state Sep 11 18:08:41.186000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbaec0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.186000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:41.204175 systemd[1]: run-docker-netns-de795e52c520.mount: Deactivated successfully. Sep 11 18:08:41.206752 systemd[1]: var-lib-docker-rootfs-overlayfs-4b27f90dc3b5aab547967e2e521fd9c69197687fd7fa84c39f4ec804e9f38485.mount: Deactivated successfully. Sep 11 18:08:41.214000 audit: BPF prog-id=226 op=UNLOAD Sep 11 18:08:41.214000 audit: BPF prog-id=230 op=UNLOAD Sep 11 18:08:41.379061 containerd[2527]: time="2026-09-11T18:08:41.378665226Z" level=info msg="connecting to shim 0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c" address="unix:///run/containerd/s/78558ed8e25367f8072e1a149168273ca6baa59812c8d051328e9a282074b5e4" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:41.397191 systemd[1]: Started docker-0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c.scope - libcontainer container 0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c. Sep 11 18:08:41.405000 audit: BPF prog-id=231 op=LOAD Sep 11 18:08:41.405000 audit: BPF prog-id=232 op=LOAD Sep 11 18:08:41.405000 audit[6407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=13101a631fd8 a2=98 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.405000 audit: BPF prog-id=232 op=UNLOAD Sep 11 18:08:41.405000 audit[6407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.405000 audit: BPF prog-id=233 op=LOAD Sep 11 18:08:41.405000 audit[6407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=13101a632290 a2=98 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.405000 audit: BPF prog-id=234 op=LOAD Sep 11 18:08:41.405000 audit[6407]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=13101a631fe8 a2=98 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.405000 audit: BPF prog-id=234 op=UNLOAD Sep 11 18:08:41.405000 audit[6407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.406000 audit: BPF prog-id=233 op=UNLOAD Sep 11 18:08:41.406000 audit[6407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.406000 audit: BPF prog-id=235 op=LOAD Sep 11 18:08:41.406000 audit[6407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=13101a6324f0 a2=98 a3=0 items=0 ppid=6396 pid=6407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666630333266333832646430653065313862363139303436 Sep 11 18:08:41.431846 kernel: docker0: port 1(veth8e2bd63) entered blocking state Sep 11 18:08:41.431579 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:41.432022 kernel: docker0: port 1(veth8e2bd63) entered disabled state Sep 11 18:08:41.432048 kernel: veth8e2bd63: entered allmulticast mode Sep 11 18:08:41.428000 audit: ANOM_PROMISCUOUS dev=veth8e2bd63 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:41.428000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c88750 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.428000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:41.434195 kernel: veth8e2bd63: entered promiscuous mode Sep 11 18:08:41.434000 audit[6430]: NETFILTER_CFG table=raw:108 family=2 entries=1 op=nft_register_rule pid=6430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:41.434000 audit[6430]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffef6c51e60 a2=0 a3=0 items=0 ppid=2991 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:41.434000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:41.436057 systemd-networkd[2304]: veth8e2bd63: Link UP Sep 11 18:08:41.454797 kernel: eth0: renamed from veth4cf4e89 Sep 11 18:08:41.454758 systemd-networkd[2304]: veth8e2bd63: Gained carrier Sep 11 18:08:41.455189 kernel: docker0: port 1(veth8e2bd63) entered blocking state Sep 11 18:08:41.455221 kernel: docker0: port 1(veth8e2bd63) entered forwarding state Sep 11 18:08:41.455331 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:41.463706 dockerd[2991]: time="2026-09-11T18:08:41.463680143Z" level=info msg="sbJoin: gwep4 ''->'ec587393ce3e', gwep6 ''->''" eid=ec587393ce3e ep=suspicious_cerf net=bridge nid=ad3b593e9776 Sep 11 18:08:42.486051 systemd[1]: docker-0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c.scope: Deactivated successfully. Sep 11 18:08:42.498613 dockerd[2991]: time="2026-09-11T18:08:42.498551512Z" level=info msg="ignoring event" container=0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:42.498930 containerd[2527]: time="2026-09-11T18:08:42.498737939Z" level=info msg="shim disconnected" id=0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c namespace=moby Sep 11 18:08:42.498930 containerd[2527]: time="2026-09-11T18:08:42.498768516Z" level=info msg="cleaning up after shim disconnected" id=0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c namespace=moby Sep 11 18:08:42.498930 containerd[2527]: time="2026-09-11T18:08:42.498790749Z" level=info msg="cleaning up dead shim" id=0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c namespace=moby Sep 11 18:08:42.522578 systemd-networkd[2304]: veth8e2bd63: Lost carrier Sep 11 18:08:42.523460 kernel: docker0: port 1(veth8e2bd63) entered disabled state Sep 11 18:08:42.523511 kernel: veth4cf4e89: renamed from eth0 Sep 11 18:08:42.542000 audit[6460]: NETFILTER_CFG table=raw:109 family=2 entries=1 op=nft_unregister_rule pid=6460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:42.544622 kernel: kauditd_printk_skb: 134 callbacks suppressed Sep 11 18:08:42.544667 kernel: audit: type=1325 audit(1789150122.542:900): table=raw:109 family=2 entries=1 op=nft_unregister_rule pid=6460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:42.542000 audit[6460]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffff15cf0e0 a2=0 a3=0 items=0 ppid=2991 pid=6460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.550849 kernel: audit: type=1300 audit(1789150122.542:900): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffff15cf0e0 a2=0 a3=0 items=0 ppid=2991 pid=6460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:42.555663 kernel: audit: type=1327 audit(1789150122.542:900): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:42.554605 systemd-networkd[2304]: veth8e2bd63: Link DOWN Sep 11 18:08:42.555776 kernel: docker0: port 1(veth8e2bd63) entered disabled state Sep 11 18:08:42.556204 kernel: veth8e2bd63 (unregistering): left allmulticast mode Sep 11 18:08:42.558261 kernel: veth8e2bd63 (unregistering): left promiscuous mode Sep 11 18:08:42.547000 audit: ANOM_PROMISCUOUS dev=veth8e2bd63 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:42.560292 kernel: docker0: port 1(veth8e2bd63) entered disabled state Sep 11 18:08:42.560364 kernel: audit: type=1700 audit(1789150122.547:901): dev=veth8e2bd63 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:42.547000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e7e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.547000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:42.573843 kernel: audit: type=1300 audit(1789150122.547:901): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e7e0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.573939 kernel: audit: type=1327 audit(1789150122.547:901): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:42.576252 systemd[1]: run-docker-netns-60255d5535f9.mount: Deactivated successfully. Sep 11 18:08:42.580852 systemd[1]: var-lib-docker-rootfs-overlayfs-0ff032f382dd0e0e18b619046b979f288b85a8f240b774d93ee010273336203c.mount: Deactivated successfully. Sep 11 18:08:42.587000 audit: BPF prog-id=231 op=UNLOAD Sep 11 18:08:42.587000 audit: BPF prog-id=235 op=UNLOAD Sep 11 18:08:42.590116 kernel: audit: type=1334 audit(1789150122.587:902): prog-id=231 op=UNLOAD Sep 11 18:08:42.590148 kernel: audit: type=1334 audit(1789150122.587:903): prog-id=235 op=UNLOAD Sep 11 18:08:42.719827 systemd[1]: tmp-containerd\x2dmount2220471574.mount: Deactivated successfully. Sep 11 18:08:42.801923 containerd[2527]: time="2026-09-11T18:08:42.801406577Z" level=info msg="connecting to shim 3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e" address="unix:///run/containerd/s/4481272b168bba3771fd6bc075260d8e593111d049090ebe4201d7e7716618b3" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:42.823198 systemd[1]: Started docker-3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e.scope - libcontainer container 3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e. Sep 11 18:08:42.830000 audit: BPF prog-id=236 op=LOAD Sep 11 18:08:42.830000 audit: BPF prog-id=237 op=LOAD Sep 11 18:08:42.834424 kernel: audit: type=1334 audit(1789150122.830:904): prog-id=236 op=LOAD Sep 11 18:08:42.834471 kernel: audit: type=1334 audit(1789150122.830:905): prog-id=237 op=LOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1f87d0d29fd8 a2=98 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.830000 audit: BPF prog-id=237 op=UNLOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.830000 audit: BPF prog-id=238 op=LOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1f87d0d2a290 a2=98 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.830000 audit: BPF prog-id=239 op=LOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1f87d0d29fe8 a2=98 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.830000 audit: BPF prog-id=239 op=UNLOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.830000 audit: BPF prog-id=238 op=UNLOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.830000 audit: BPF prog-id=240 op=LOAD Sep 11 18:08:42.830000 audit[6489]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1f87d0d2a4f0 a2=98 a3=0 items=0 ppid=6478 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.830000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616664343030616337373562386537306538656536323561 Sep 11 18:08:42.859987 kernel: docker0: port 1(vetha49dce1) entered blocking state Sep 11 18:08:42.857772 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:42.854000 audit: ANOM_PROMISCUOUS dev=vetha49dce1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:42.860223 kernel: docker0: port 1(vetha49dce1) entered disabled state Sep 11 18:08:42.860244 kernel: vetha49dce1: entered allmulticast mode Sep 11 18:08:42.860260 kernel: vetha49dce1: entered promiscuous mode Sep 11 18:08:42.854000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811776660 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.854000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:42.862000 audit[6509]: NETFILTER_CFG table=raw:110 family=2 entries=1 op=nft_register_rule pid=6509 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:42.862000 audit[6509]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc925ca1c0 a2=0 a3=0 items=0 ppid=2991 pid=6509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:42.862000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:42.864284 systemd-networkd[2304]: vetha49dce1: Link UP Sep 11 18:08:42.871028 kernel: eth0: renamed from veth176e8eb Sep 11 18:08:42.872692 kernel: docker0: port 1(vetha49dce1) entered blocking state Sep 11 18:08:42.872744 kernel: docker0: port 1(vetha49dce1) entered forwarding state Sep 11 18:08:42.872809 systemd-networkd[2304]: vetha49dce1: Gained carrier Sep 11 18:08:42.873254 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:42.882216 dockerd[2991]: time="2026-09-11T18:08:42.882184241Z" level=info msg="sbJoin: gwep4 ''->'796539982b67', gwep6 ''->''" eid=796539982b67 ep=exciting_edison net=bridge nid=ad3b593e9776 Sep 11 18:08:43.904084 systemd[1]: docker-3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e.scope: Deactivated successfully. Sep 11 18:08:43.917783 containerd[2527]: time="2026-09-11T18:08:43.917626844Z" level=info msg="shim disconnected" id=3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e namespace=moby Sep 11 18:08:43.917783 containerd[2527]: time="2026-09-11T18:08:43.917660682Z" level=info msg="cleaning up after shim disconnected" id=3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e namespace=moby Sep 11 18:08:43.917783 containerd[2527]: time="2026-09-11T18:08:43.917669199Z" level=info msg="cleaning up dead shim" id=3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e namespace=moby Sep 11 18:08:43.918165 dockerd[2991]: time="2026-09-11T18:08:43.917848497Z" level=info msg="ignoring event" container=3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:43.943767 systemd-networkd[2304]: vetha49dce1: Lost carrier Sep 11 18:08:43.945020 kernel: docker0: port 1(vetha49dce1) entered disabled state Sep 11 18:08:43.945053 kernel: veth176e8eb: renamed from eth0 Sep 11 18:08:43.960000 audit[6539]: NETFILTER_CFG table=raw:111 family=2 entries=1 op=nft_unregister_rule pid=6539 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:43.960000 audit[6539]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff1a996930 a2=0 a3=0 items=0 ppid=2991 pid=6539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:43.960000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:43.965365 systemd-networkd[2304]: vetha49dce1: Link DOWN Sep 11 18:08:43.967028 kernel: docker0: port 1(vetha49dce1) entered disabled state Sep 11 18:08:43.969466 kernel: vetha49dce1 (unregistering): left allmulticast mode Sep 11 18:08:43.969526 kernel: vetha49dce1 (unregistering): left promiscuous mode Sep 11 18:08:43.964000 audit: ANOM_PROMISCUOUS dev=vetha49dce1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:43.970788 kernel: docker0: port 1(vetha49dce1) entered disabled state Sep 11 18:08:43.964000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4eae0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:43.964000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:43.985320 systemd[1]: run-docker-netns-8622246b5b4c.mount: Deactivated successfully. Sep 11 18:08:43.989948 systemd[1]: var-lib-docker-rootfs-overlayfs-3afd400ac775b8e70e8ee625a79a56ec4b3b3c2bfbc71d10e5a01dd3ca98dd8e.mount: Deactivated successfully. Sep 11 18:08:43.995000 audit: BPF prog-id=236 op=UNLOAD Sep 11 18:08:43.995000 audit: BPF prog-id=240 op=UNLOAD Sep 11 18:08:44.173470 containerd[2527]: time="2026-09-11T18:08:44.173378875Z" level=info msg="connecting to shim abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7" address="unix:///run/containerd/s/9688ccac1184a422ac90c96dd7e2e448199130a1a0c5a83c9848f5d053937649" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:44.192159 systemd[1]: Started docker-abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7.scope - libcontainer container abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7. Sep 11 18:08:44.199000 audit: BPF prog-id=241 op=LOAD Sep 11 18:08:44.199000 audit: BPF prog-id=242 op=LOAD Sep 11 18:08:44.199000 audit[6569]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=16688db31fd8 a2=98 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.199000 audit: BPF prog-id=242 op=UNLOAD Sep 11 18:08:44.199000 audit[6569]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.200000 audit: BPF prog-id=243 op=LOAD Sep 11 18:08:44.200000 audit[6569]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=16688db32290 a2=98 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.200000 audit: BPF prog-id=244 op=LOAD Sep 11 18:08:44.200000 audit[6569]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=16688db31fe8 a2=98 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.200000 audit: BPF prog-id=244 op=UNLOAD Sep 11 18:08:44.200000 audit[6569]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.200000 audit: BPF prog-id=243 op=UNLOAD Sep 11 18:08:44.200000 audit[6569]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.200000 audit: BPF prog-id=245 op=LOAD Sep 11 18:08:44.200000 audit[6569]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=16688db324f0 a2=98 a3=0 items=0 ppid=6557 pid=6569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61626566393163316535616432336331623537383837333862 Sep 11 18:08:44.224094 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:44.226273 kernel: docker0: port 1(veth2ea46bd) entered blocking state Sep 11 18:08:44.226328 kernel: docker0: port 1(veth2ea46bd) entered disabled state Sep 11 18:08:44.227171 kernel: veth2ea46bd: entered allmulticast mode Sep 11 18:08:44.222000 audit: ANOM_PROMISCUOUS dev=veth2ea46bd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:44.228327 kernel: veth2ea46bd: entered promiscuous mode Sep 11 18:08:44.222000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81143a780 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.222000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:44.233000 audit[6589]: NETFILTER_CFG table=raw:112 family=2 entries=1 op=nft_register_rule pid=6589 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:44.233000 audit[6589]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdf929c9e0 a2=0 a3=0 items=0 ppid=2991 pid=6589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:44.233000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:44.235463 systemd-networkd[2304]: veth2ea46bd: Link UP Sep 11 18:08:44.242855 kernel: eth0: renamed from veth293df95 Sep 11 18:08:44.242916 kernel: docker0: port 1(veth2ea46bd) entered blocking state Sep 11 18:08:44.244317 kernel: docker0: port 1(veth2ea46bd) entered forwarding state Sep 11 18:08:44.244674 systemd-networkd[2304]: veth2ea46bd: Gained carrier Sep 11 18:08:44.245249 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:44.253331 dockerd[2991]: time="2026-09-11T18:08:44.253298232Z" level=info msg="sbJoin: gwep4 ''->'35c5fc6192ba', gwep6 ''->''" eid=35c5fc6192ba ep=nice_saha net=bridge nid=ad3b593e9776 Sep 11 18:08:45.276849 systemd[1]: docker-abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7.scope: Deactivated successfully. Sep 11 18:08:45.288271 dockerd[2991]: time="2026-09-11T18:08:45.288233148Z" level=info msg="ignoring event" container=abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:45.289154 containerd[2527]: time="2026-09-11T18:08:45.288971871Z" level=info msg="shim disconnected" id=abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7 namespace=moby Sep 11 18:08:45.289154 containerd[2527]: time="2026-09-11T18:08:45.289019850Z" level=info msg="cleaning up after shim disconnected" id=abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7 namespace=moby Sep 11 18:08:45.289154 containerd[2527]: time="2026-09-11T18:08:45.289028991Z" level=info msg="cleaning up dead shim" id=abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7 namespace=moby Sep 11 18:08:45.312246 systemd-networkd[2304]: veth2ea46bd: Lost carrier Sep 11 18:08:45.313132 kernel: docker0: port 1(veth2ea46bd) entered disabled state Sep 11 18:08:45.313204 kernel: veth293df95: renamed from eth0 Sep 11 18:08:45.328000 audit[6618]: NETFILTER_CFG table=raw:113 family=2 entries=1 op=nft_unregister_rule pid=6618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:45.328000 audit[6618]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc5e084c00 a2=0 a3=0 items=0 ppid=2991 pid=6618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.328000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:45.333077 systemd-networkd[2304]: veth2ea46bd: Link DOWN Sep 11 18:08:45.334029 kernel: docker0: port 1(veth2ea46bd) entered disabled state Sep 11 18:08:45.336952 kernel: veth2ea46bd (unregistering): left allmulticast mode Sep 11 18:08:45.337019 kernel: veth2ea46bd (unregistering): left promiscuous mode Sep 11 18:08:45.337038 kernel: docker0: port 1(veth2ea46bd) entered disabled state Sep 11 18:08:45.331000 audit: ANOM_PROMISCUOUS dev=veth2ea46bd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:45.331000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77220 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.331000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:45.350033 systemd[1]: run-docker-netns-521e056c5c91.mount: Deactivated successfully. Sep 11 18:08:45.354626 systemd[1]: var-lib-docker-rootfs-overlayfs-abef91c1e5ad23c1b5788738b5e8d31462322aad0009689ecba0c36543e1a5d7.mount: Deactivated successfully. Sep 11 18:08:45.362000 audit: BPF prog-id=241 op=UNLOAD Sep 11 18:08:45.362000 audit: BPF prog-id=245 op=UNLOAD Sep 11 18:08:45.466148 systemd[1]: tmp-containerd\x2dmount916026483.mount: Deactivated successfully. Sep 11 18:08:45.526372 containerd[2527]: time="2026-09-11T18:08:45.526331365Z" level=info msg="connecting to shim a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934" address="unix:///run/containerd/s/ad7cff8451bb09b187fec4744d6b39248dc10df7565181d18a29cfaab14e012a" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:45.548161 systemd[1]: Started docker-a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934.scope - libcontainer container a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934. Sep 11 18:08:45.555000 audit: BPF prog-id=246 op=LOAD Sep 11 18:08:45.556000 audit: BPF prog-id=247 op=LOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2aee4bdc7fd8 a2=98 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.556000 audit: BPF prog-id=247 op=UNLOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.556000 audit: BPF prog-id=248 op=LOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2aee4bdc8290 a2=98 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.556000 audit: BPF prog-id=249 op=LOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2aee4bdc7fe8 a2=98 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.556000 audit: BPF prog-id=249 op=UNLOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.556000 audit: BPF prog-id=248 op=UNLOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.556000 audit: BPF prog-id=250 op=LOAD Sep 11 18:08:45.556000 audit[6647]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2aee4bdc84f0 a2=98 a3=0 items=0 ppid=6636 pid=6647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61376262396539633038613134376237363530323462663334 Sep 11 18:08:45.577744 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:45.580347 kernel: docker0: port 1(vethcb34f59) entered blocking state Sep 11 18:08:45.580403 kernel: docker0: port 1(vethcb34f59) entered disabled state Sep 11 18:08:45.581585 kernel: vethcb34f59: entered allmulticast mode Sep 11 18:08:45.582543 kernel: vethcb34f59: entered promiscuous mode Sep 11 18:08:45.576000 audit: ANOM_PROMISCUOUS dev=vethcb34f59 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:45.576000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155f2f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.576000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:45.583000 audit[6669]: NETFILTER_CFG table=raw:114 family=2 entries=1 op=nft_register_rule pid=6669 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:45.583000 audit[6669]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffddac3bcd0 a2=0 a3=0 items=0 ppid=2991 pid=6669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:45.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:45.585269 systemd-networkd[2304]: vethcb34f59: Link UP Sep 11 18:08:45.592024 kernel: eth0: renamed from veth2e7b94c Sep 11 18:08:45.594421 kernel: docker0: port 1(vethcb34f59) entered blocking state Sep 11 18:08:45.594467 kernel: docker0: port 1(vethcb34f59) entered forwarding state Sep 11 18:08:45.594522 systemd-networkd[2304]: vethcb34f59: Gained carrier Sep 11 18:08:45.594895 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:45.602494 dockerd[2991]: time="2026-09-11T18:08:45.602468803Z" level=info msg="sbJoin: gwep4 ''->'5187244a7330', gwep6 ''->''" eid=5187244a7330 ep=distracted_elion net=bridge nid=ad3b593e9776 Sep 11 18:08:46.624680 systemd[1]: docker-a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934.scope: Deactivated successfully. Sep 11 18:08:46.636964 containerd[2527]: time="2026-09-11T18:08:46.636819156Z" level=info msg="shim disconnected" id=a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934 namespace=moby Sep 11 18:08:46.636964 containerd[2527]: time="2026-09-11T18:08:46.636853161Z" level=info msg="cleaning up after shim disconnected" id=a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934 namespace=moby Sep 11 18:08:46.636964 containerd[2527]: time="2026-09-11T18:08:46.636864133Z" level=info msg="cleaning up dead shim" id=a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934 namespace=moby Sep 11 18:08:46.637335 dockerd[2991]: time="2026-09-11T18:08:46.637036048Z" level=info msg="ignoring event" container=a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:46.659484 kernel: docker0: port 1(vethcb34f59) entered disabled state Sep 11 18:08:46.659260 systemd-networkd[2304]: vethcb34f59: Lost carrier Sep 11 18:08:46.659725 kernel: veth2e7b94c: renamed from eth0 Sep 11 18:08:46.673000 audit[6699]: NETFILTER_CFG table=raw:115 family=2 entries=1 op=nft_unregister_rule pid=6699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:46.673000 audit[6699]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff88c0f170 a2=0 a3=0 items=0 ppid=2991 pid=6699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.673000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:46.678420 systemd-networkd[2304]: vethcb34f59: Link DOWN Sep 11 18:08:46.681027 kernel: docker0: port 1(vethcb34f59) entered disabled state Sep 11 18:08:46.681080 kernel: vethcb34f59 (unregistering): left allmulticast mode Sep 11 18:08:46.682554 kernel: vethcb34f59 (unregistering): left promiscuous mode Sep 11 18:08:46.683526 kernel: docker0: port 1(vethcb34f59) entered disabled state Sep 11 18:08:46.677000 audit: ANOM_PROMISCUOUS dev=vethcb34f59 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:46.677000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8114b58a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.677000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:46.699499 systemd[1]: run-docker-netns-717893e2b391.mount: Deactivated successfully. Sep 11 18:08:46.704214 systemd[1]: var-lib-docker-rootfs-overlayfs-a7bb9e9c08a147b765024bf3429e01cd83345791a082eb620d36ca5c7c46c934.mount: Deactivated successfully. Sep 11 18:08:46.716000 audit: BPF prog-id=246 op=UNLOAD Sep 11 18:08:46.716000 audit: BPF prog-id=250 op=UNLOAD Sep 11 18:08:46.811411 systemd[1]: tmp-containerd\x2dmount3509244392.mount: Deactivated successfully. Sep 11 18:08:46.898475 containerd[2527]: time="2026-09-11T18:08:46.898394306Z" level=info msg="connecting to shim e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924" address="unix:///run/containerd/s/24c34c174f0d91b9a24794fafee061accaf6149dd07cb42643808066a424f686" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:46.921187 systemd[1]: Started docker-e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924.scope - libcontainer container e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924. Sep 11 18:08:46.928000 audit: BPF prog-id=251 op=LOAD Sep 11 18:08:46.928000 audit: BPF prog-id=252 op=LOAD Sep 11 18:08:46.928000 audit[6728]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=f696d85ffd8 a2=98 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.929000 audit: BPF prog-id=252 op=UNLOAD Sep 11 18:08:46.929000 audit[6728]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.929000 audit: BPF prog-id=253 op=LOAD Sep 11 18:08:46.929000 audit[6728]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=f696d860290 a2=98 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.929000 audit: BPF prog-id=254 op=LOAD Sep 11 18:08:46.929000 audit[6728]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=f696d85ffe8 a2=98 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.929000 audit: BPF prog-id=254 op=UNLOAD Sep 11 18:08:46.929000 audit[6728]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.929000 audit: BPF prog-id=253 op=UNLOAD Sep 11 18:08:46.929000 audit[6728]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.929000 audit: BPF prog-id=255 op=LOAD Sep 11 18:08:46.929000 audit[6728]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=f696d8604f0 a2=98 a3=0 items=0 ppid=6715 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396631623631386232613635376430393365643139373737 Sep 11 18:08:46.950768 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:46.953510 kernel: docker0: port 1(vethb20b619) entered blocking state Sep 11 18:08:46.953541 kernel: docker0: port 1(vethb20b619) entered disabled state Sep 11 18:08:46.954810 kernel: vethb20b619: entered allmulticast mode Sep 11 18:08:46.949000 audit: ANOM_PROMISCUOUS dev=vethb20b619 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:46.955829 kernel: vethb20b619: entered promiscuous mode Sep 11 18:08:46.949000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f106f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.949000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:46.957000 audit[6750]: NETFILTER_CFG table=raw:116 family=2 entries=1 op=nft_register_rule pid=6750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:46.957000 audit[6750]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd364b72a0 a2=0 a3=0 items=0 ppid=2991 pid=6750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:46.957000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:46.958839 systemd-networkd[2304]: vethb20b619: Link UP Sep 11 18:08:46.968265 kernel: eth0: renamed from veth3ae05ca Sep 11 18:08:46.968370 kernel: docker0: port 1(vethb20b619) entered blocking state Sep 11 18:08:46.969135 kernel: docker0: port 1(vethb20b619) entered forwarding state Sep 11 18:08:46.969252 systemd-networkd[2304]: vethb20b619: Gained carrier Sep 11 18:08:46.969419 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:46.981133 dockerd[2991]: time="2026-09-11T18:08:46.981105452Z" level=info msg="sbJoin: gwep4 ''->'aa01c74a18f3', gwep6 ''->''" eid=aa01c74a18f3 ep=charming_knuth net=bridge nid=ad3b593e9776 Sep 11 18:08:48.005875 systemd[1]: docker-e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924.scope: Deactivated successfully. Sep 11 18:08:48.018997 dockerd[2991]: time="2026-09-11T18:08:48.018931098Z" level=info msg="ignoring event" container=e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:48.019527 containerd[2527]: time="2026-09-11T18:08:48.019489288Z" level=info msg="shim disconnected" id=e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924 namespace=moby Sep 11 18:08:48.019527 containerd[2527]: time="2026-09-11T18:08:48.019518879Z" level=info msg="cleaning up after shim disconnected" id=e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924 namespace=moby Sep 11 18:08:48.019527 containerd[2527]: time="2026-09-11T18:08:48.019527012Z" level=info msg="cleaning up dead shim" id=e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924 namespace=moby Sep 11 18:08:48.054318 kernel: docker0: port 1(vethb20b619) entered disabled state Sep 11 18:08:48.054391 kernel: veth3ae05ca: renamed from eth0 Sep 11 18:08:48.054424 systemd-networkd[2304]: vethb20b619: Lost carrier Sep 11 18:08:48.073000 audit[6780]: NETFILTER_CFG table=raw:117 family=2 entries=1 op=nft_unregister_rule pid=6780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:48.077142 kernel: kauditd_printk_skb: 134 callbacks suppressed Sep 11 18:08:48.077170 kernel: audit: type=1325 audit(1789150128.073:956): table=raw:117 family=2 entries=1 op=nft_unregister_rule pid=6780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:48.073000 audit[6780]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe1c021110 a2=0 a3=0 items=0 ppid=2991 pid=6780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.079947 kernel: audit: type=1300 audit(1789150128.073:956): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe1c021110 a2=0 a3=0 items=0 ppid=2991 pid=6780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.073000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:48.082405 kernel: audit: type=1327 audit(1789150128.073:956): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:48.083040 kernel: docker0: port 1(vethb20b619) entered disabled state Sep 11 18:08:48.084221 systemd-networkd[2304]: vethb20b619: Link DOWN Sep 11 18:08:48.087299 kernel: vethb20b619 (unregistering): left allmulticast mode Sep 11 18:08:48.087356 kernel: vethb20b619 (unregistering): left promiscuous mode Sep 11 18:08:48.087373 kernel: docker0: port 1(vethb20b619) entered disabled state Sep 11 18:08:48.080000 audit: ANOM_PROMISCUOUS dev=vethb20b619 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:48.089873 kernel: audit: type=1700 audit(1789150128.080:957): dev=vethb20b619 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:48.080000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8bd00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.080000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:48.106259 kernel: audit: type=1300 audit(1789150128.080:957): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8bd00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.106299 kernel: audit: type=1327 audit(1789150128.080:957): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:48.107726 systemd[1]: run-docker-netns-4cb19ec43ef0.mount: Deactivated successfully. Sep 11 18:08:48.114222 systemd[1]: var-lib-docker-rootfs-overlayfs-e9f1b618b2a657d093ed19777d7822ac74784001812ec0feed99390bab72b924.mount: Deactivated successfully. Sep 11 18:08:48.118000 audit: BPF prog-id=251 op=UNLOAD Sep 11 18:08:48.118000 audit: BPF prog-id=255 op=UNLOAD Sep 11 18:08:48.121329 kernel: audit: type=1334 audit(1789150128.118:958): prog-id=251 op=UNLOAD Sep 11 18:08:48.121352 kernel: audit: type=1334 audit(1789150128.118:959): prog-id=255 op=UNLOAD Sep 11 18:08:48.315517 containerd[2527]: time="2026-09-11T18:08:48.315408973Z" level=info msg="connecting to shim 97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432" address="unix:///run/containerd/s/bad8a5ea9e81e532fb139b46f64e9645b59ecb8c12fc4982a041b395ad2603f0" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:48.338172 systemd[1]: Started docker-97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432.scope - libcontainer container 97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432. Sep 11 18:08:48.345000 audit: BPF prog-id=256 op=LOAD Sep 11 18:08:48.346000 audit: BPF prog-id=257 op=LOAD Sep 11 18:08:48.348949 kernel: audit: type=1334 audit(1789150128.345:960): prog-id=256 op=LOAD Sep 11 18:08:48.348987 kernel: audit: type=1334 audit(1789150128.346:961): prog-id=257 op=LOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=33a01f0d5fd8 a2=98 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.346000 audit: BPF prog-id=257 op=UNLOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.346000 audit: BPF prog-id=258 op=LOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=33a01f0d6290 a2=98 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.346000 audit: BPF prog-id=259 op=LOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=33a01f0d5fe8 a2=98 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.346000 audit: BPF prog-id=259 op=UNLOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.346000 audit: BPF prog-id=258 op=UNLOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.346000 audit: BPF prog-id=260 op=LOAD Sep 11 18:08:48.346000 audit[6809]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=33a01f0d64f0 a2=98 a3=0 items=0 ppid=6797 pid=6809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373831323030356433333239366330336632343566663832 Sep 11 18:08:48.372277 kernel: docker0: port 1(vethe5662c4) entered blocking state Sep 11 18:08:48.372327 kernel: docker0: port 1(vethe5662c4) entered disabled state Sep 11 18:08:48.368000 audit: ANOM_PROMISCUOUS dev=vethe5662c4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:48.374439 kernel: vethe5662c4: entered allmulticast mode Sep 11 18:08:48.374464 kernel: vethe5662c4: entered promiscuous mode Sep 11 18:08:48.368000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b66480 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.368000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:48.375831 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:48.377000 audit[6830]: NETFILTER_CFG table=raw:118 family=2 entries=1 op=nft_register_rule pid=6830 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:48.377000 audit[6830]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffcf31a56f0 a2=0 a3=0 items=0 ppid=2991 pid=6830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:48.377000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:48.378929 systemd-networkd[2304]: vethe5662c4: Link UP Sep 11 18:08:48.387048 kernel: eth0: renamed from veth98a1ee8 Sep 11 18:08:48.387102 kernel: docker0: port 1(vethe5662c4) entered blocking state Sep 11 18:08:48.387120 kernel: docker0: port 1(vethe5662c4) entered forwarding state Sep 11 18:08:48.387718 systemd-networkd[2304]: vethe5662c4: Gained carrier Sep 11 18:08:48.388009 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:48.397325 dockerd[2991]: time="2026-09-11T18:08:48.397292746Z" level=info msg="sbJoin: gwep4 ''->'0fbedf457fe4', gwep6 ''->''" eid=0fbedf457fe4 ep=practical_gauss net=bridge nid=ad3b593e9776 Sep 11 18:08:49.422352 systemd[1]: docker-97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432.scope: Deactivated successfully. Sep 11 18:08:49.435725 dockerd[2991]: time="2026-09-11T18:08:49.435690875Z" level=info msg="ignoring event" container=97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:49.436604 containerd[2527]: time="2026-09-11T18:08:49.436468024Z" level=info msg="shim disconnected" id=97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432 namespace=moby Sep 11 18:08:49.436604 containerd[2527]: time="2026-09-11T18:08:49.436499764Z" level=info msg="cleaning up after shim disconnected" id=97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432 namespace=moby Sep 11 18:08:49.436604 containerd[2527]: time="2026-09-11T18:08:49.436509306Z" level=info msg="cleaning up dead shim" id=97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432 namespace=moby Sep 11 18:08:49.459324 systemd-networkd[2304]: vethe5662c4: Lost carrier Sep 11 18:08:49.460072 kernel: docker0: port 1(vethe5662c4) entered disabled state Sep 11 18:08:49.460281 kernel: veth98a1ee8: renamed from eth0 Sep 11 18:08:49.475000 audit[6860]: NETFILTER_CFG table=raw:119 family=2 entries=1 op=nft_unregister_rule pid=6860 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:49.475000 audit[6860]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff6d5922f0 a2=0 a3=0 items=0 ppid=2991 pid=6860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.475000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:49.480758 systemd-networkd[2304]: vethe5662c4: Link DOWN Sep 11 18:08:49.484042 kernel: docker0: port 1(vethe5662c4) entered disabled state Sep 11 18:08:49.484098 kernel: vethe5662c4 (unregistering): left allmulticast mode Sep 11 18:08:49.485243 kernel: vethe5662c4 (unregistering): left promiscuous mode Sep 11 18:08:49.479000 audit: ANOM_PROMISCUOUS dev=vethe5662c4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:49.485348 kernel: docker0: port 1(vethe5662c4) entered disabled state Sep 11 18:08:49.479000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbac00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.479000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:49.501134 systemd[1]: run-docker-netns-c162279be9db.mount: Deactivated successfully. Sep 11 18:08:49.503841 systemd[1]: var-lib-docker-rootfs-overlayfs-97812005d33296c03f245ff829b56ccc072b265715797a5e31893756e37c0432.mount: Deactivated successfully. Sep 11 18:08:49.515000 audit: BPF prog-id=256 op=UNLOAD Sep 11 18:08:49.515000 audit: BPF prog-id=260 op=UNLOAD Sep 11 18:08:49.678158 containerd[2527]: time="2026-09-11T18:08:49.678079265Z" level=info msg="connecting to shim f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df" address="unix:///run/containerd/s/101bf9f2628d3e9fd7142095c602a030aeb626a3fd7689d669e57db87a358037" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:49.702203 systemd[1]: Started docker-f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df.scope - libcontainer container f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df. Sep 11 18:08:49.710000 audit: BPF prog-id=261 op=LOAD Sep 11 18:08:49.711000 audit: BPF prog-id=262 op=LOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=97d9f93dfd8 a2=98 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.711000 audit: BPF prog-id=262 op=UNLOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.711000 audit: BPF prog-id=263 op=LOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=97d9f93e290 a2=98 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.711000 audit: BPF prog-id=264 op=LOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=97d9f93dfe8 a2=98 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.711000 audit: BPF prog-id=264 op=UNLOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.711000 audit: BPF prog-id=263 op=UNLOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.711000 audit: BPF prog-id=265 op=LOAD Sep 11 18:08:49.711000 audit[6888]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=97d9f93e4f0 a2=98 a3=0 items=0 ppid=6877 pid=6888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353639343866346361663738653864623538346534333934 Sep 11 18:08:49.733069 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:49.735528 kernel: docker0: port 1(veth14e6e8b) entered blocking state Sep 11 18:08:49.735560 kernel: docker0: port 1(veth14e6e8b) entered disabled state Sep 11 18:08:49.736377 kernel: veth14e6e8b: entered allmulticast mode Sep 11 18:08:49.732000 audit: ANOM_PROMISCUOUS dev=veth14e6e8b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:49.737438 kernel: veth14e6e8b: entered promiscuous mode Sep 11 18:08:49.732000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca810d4cf60 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.732000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:49.739000 audit[6909]: NETFILTER_CFG table=raw:120 family=2 entries=1 op=nft_register_rule pid=6909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:49.739000 audit[6909]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc4fc49eb0 a2=0 a3=0 items=0 ppid=2991 pid=6909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:49.739000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:49.741038 systemd-networkd[2304]: veth14e6e8b: Link UP Sep 11 18:08:49.749018 kernel: eth0: renamed from veth2aac635 Sep 11 18:08:49.751362 kernel: docker0: port 1(veth14e6e8b) entered blocking state Sep 11 18:08:49.751405 kernel: docker0: port 1(veth14e6e8b) entered forwarding state Sep 11 18:08:49.751471 systemd-networkd[2304]: veth14e6e8b: Gained carrier Sep 11 18:08:49.751814 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:49.764738 dockerd[2991]: time="2026-09-11T18:08:49.764715294Z" level=info msg="sbJoin: gwep4 ''->'331c4c133319', gwep6 ''->''" eid=331c4c133319 ep=gifted_robinson net=bridge nid=ad3b593e9776 Sep 11 18:08:50.788299 systemd[1]: docker-f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df.scope: Deactivated successfully. Sep 11 18:08:50.800216 dockerd[2991]: time="2026-09-11T18:08:50.800105951Z" level=info msg="ignoring event" container=f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:50.800677 containerd[2527]: time="2026-09-11T18:08:50.800273451Z" level=info msg="shim disconnected" id=f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df namespace=moby Sep 11 18:08:50.800677 containerd[2527]: time="2026-09-11T18:08:50.800298144Z" level=info msg="cleaning up after shim disconnected" id=f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df namespace=moby Sep 11 18:08:50.800677 containerd[2527]: time="2026-09-11T18:08:50.800303927Z" level=info msg="cleaning up dead shim" id=f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df namespace=moby Sep 11 18:08:50.827910 systemd-networkd[2304]: veth14e6e8b: Lost carrier Sep 11 18:08:50.828847 kernel: docker0: port 1(veth14e6e8b) entered disabled state Sep 11 18:08:50.828877 kernel: veth2aac635: renamed from eth0 Sep 11 18:08:50.839000 audit[6942]: NETFILTER_CFG table=raw:121 family=2 entries=1 op=nft_unregister_rule pid=6942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:50.839000 audit[6942]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdd652a780 a2=0 a3=0 items=0 ppid=2991 pid=6942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:50.839000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:50.846766 systemd-networkd[2304]: veth14e6e8b: Link DOWN Sep 11 18:08:50.848031 kernel: docker0: port 1(veth14e6e8b) entered disabled state Sep 11 18:08:50.850149 kernel: veth14e6e8b (unregistering): left allmulticast mode Sep 11 18:08:50.850351 kernel: veth14e6e8b (unregistering): left promiscuous mode Sep 11 18:08:50.845000 audit: ANOM_PROMISCUOUS dev=veth14e6e8b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:50.851170 kernel: docker0: port 1(veth14e6e8b) entered disabled state Sep 11 18:08:50.845000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e040 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:50.845000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:50.862947 systemd[1]: run-docker-netns-f58036b10a4b.mount: Deactivated successfully. Sep 11 18:08:50.867904 systemd[1]: var-lib-docker-rootfs-overlayfs-f56948f4caf78e8db584e43945758045795308f7c5f3987c78a2949b754c56df.mount: Deactivated successfully. Sep 11 18:08:50.873000 audit: BPF prog-id=261 op=UNLOAD Sep 11 18:08:50.873000 audit: BPF prog-id=265 op=UNLOAD Sep 11 18:08:51.023602 systemd[1]: tmp-containerd\x2dmount653031327.mount: Deactivated successfully. Sep 11 18:08:51.118969 containerd[2527]: time="2026-09-11T18:08:51.118881709Z" level=info msg="connecting to shim 06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30" address="unix:///run/containerd/s/cbe9e37eb21f8c6697067156f96e89d0b8a326b0486adc63c18d35bd1478cb24" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:51.142146 systemd[1]: Started docker-06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30.scope - libcontainer container 06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30. Sep 11 18:08:51.149000 audit: BPF prog-id=266 op=LOAD Sep 11 18:08:51.150000 audit: BPF prog-id=267 op=LOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b7c9f63bfd8 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.150000 audit: BPF prog-id=267 op=UNLOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.150000 audit: BPF prog-id=268 op=LOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b7c9f63c290 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.150000 audit: BPF prog-id=269 op=LOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3b7c9f63bfe8 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.150000 audit: BPF prog-id=269 op=UNLOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.150000 audit: BPF prog-id=268 op=UNLOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.150000 audit: BPF prog-id=270 op=LOAD Sep 11 18:08:51.150000 audit[6970]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b7c9f63c4f0 a2=98 a3=0 items=0 ppid=6959 pid=6970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30366165613065323066313137333634616663356262393533 Sep 11 18:08:51.173333 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:51.175366 kernel: docker0: port 1(veth74e63d3) entered blocking state Sep 11 18:08:51.175420 kernel: docker0: port 1(veth74e63d3) entered disabled state Sep 11 18:08:51.175974 kernel: veth74e63d3: entered allmulticast mode Sep 11 18:08:51.177033 kernel: veth74e63d3: entered promiscuous mode Sep 11 18:08:51.172000 audit: ANOM_PROMISCUOUS dev=veth74e63d3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:51.172000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81143bb30 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.172000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:51.179000 audit[6992]: NETFILTER_CFG table=raw:122 family=2 entries=1 op=nft_register_rule pid=6992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:51.179000 audit[6992]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff54503620 a2=0 a3=0 items=0 ppid=2991 pid=6992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:51.179000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:51.181062 systemd-networkd[2304]: veth74e63d3: Link UP Sep 11 18:08:51.193982 kernel: eth0: renamed from veth939a78d Sep 11 18:08:51.194048 kernel: docker0: port 1(veth74e63d3) entered blocking state Sep 11 18:08:51.194066 kernel: docker0: port 1(veth74e63d3) entered forwarding state Sep 11 18:08:51.194952 systemd-networkd[2304]: veth74e63d3: Gained carrier Sep 11 18:08:51.195377 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:51.202109 dockerd[2991]: time="2026-09-11T18:08:51.202080640Z" level=info msg="sbJoin: gwep4 ''->'ec1c2279d5f7', gwep6 ''->''" eid=ec1c2279d5f7 ep=stupefied_pike net=bridge nid=ad3b593e9776 Sep 11 18:08:52.224763 systemd[1]: docker-06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30.scope: Deactivated successfully. Sep 11 18:08:52.237551 containerd[2527]: time="2026-09-11T18:08:52.237517690Z" level=info msg="shim disconnected" id=06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30 namespace=moby Sep 11 18:08:52.237920 dockerd[2991]: time="2026-09-11T18:08:52.237613064Z" level=info msg="ignoring event" container=06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:52.238165 containerd[2527]: time="2026-09-11T18:08:52.237972665Z" level=info msg="cleaning up after shim disconnected" id=06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30 namespace=moby Sep 11 18:08:52.238165 containerd[2527]: time="2026-09-11T18:08:52.237991534Z" level=info msg="cleaning up dead shim" id=06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30 namespace=moby Sep 11 18:08:52.263698 kernel: docker0: port 1(veth74e63d3) entered disabled state Sep 11 18:08:52.263776 kernel: veth939a78d: renamed from eth0 Sep 11 18:08:52.263801 systemd-networkd[2304]: veth74e63d3: Lost carrier Sep 11 18:08:52.278000 audit[7023]: NETFILTER_CFG table=raw:123 family=2 entries=1 op=nft_unregister_rule pid=7023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:52.278000 audit[7023]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdc0e7e130 a2=0 a3=0 items=0 ppid=2991 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.278000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:52.286206 systemd-networkd[2304]: veth74e63d3: Link DOWN Sep 11 18:08:52.288205 kernel: docker0: port 1(veth74e63d3) entered disabled state Sep 11 18:08:52.288390 kernel: veth74e63d3 (unregistering): left allmulticast mode Sep 11 18:08:52.288413 kernel: veth74e63d3 (unregistering): left promiscuous mode Sep 11 18:08:52.289281 kernel: docker0: port 1(veth74e63d3) entered disabled state Sep 11 18:08:52.284000 audit: ANOM_PROMISCUOUS dev=veth74e63d3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:52.284000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76260 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.284000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:52.298822 systemd[1]: run-docker-netns-b401f8524422.mount: Deactivated successfully. Sep 11 18:08:52.303162 systemd[1]: var-lib-docker-rootfs-overlayfs-06aea0e20f117364afc5bb9530710e1cbc2c2d3ef79da235a02084cab24d1f30.mount: Deactivated successfully. Sep 11 18:08:52.314000 audit: BPF prog-id=266 op=UNLOAD Sep 11 18:08:52.314000 audit: BPF prog-id=270 op=UNLOAD Sep 11 18:08:52.415961 systemd[1]: tmp-containerd\x2dmount2487849224.mount: Deactivated successfully. Sep 11 18:08:52.502073 containerd[2527]: time="2026-09-11T18:08:52.501172000Z" level=info msg="connecting to shim a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03" address="unix:///run/containerd/s/3439372c23e62918ec8bc74d9cb136ba49af69221d4912ddc9d97f4fbf0d89d7" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:52.519168 systemd[1]: Started docker-a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03.scope - libcontainer container a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03. Sep 11 18:08:52.526000 audit: BPF prog-id=271 op=LOAD Sep 11 18:08:52.527000 audit: BPF prog-id=272 op=LOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fa2b95b1fd8 a2=98 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.527000 audit: BPF prog-id=272 op=UNLOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.527000 audit: BPF prog-id=273 op=LOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fa2b95b2290 a2=98 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.527000 audit: BPF prog-id=274 op=LOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2fa2b95b1fe8 a2=98 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.527000 audit: BPF prog-id=274 op=UNLOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.527000 audit: BPF prog-id=273 op=UNLOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.527000 audit: BPF prog-id=275 op=LOAD Sep 11 18:08:52.527000 audit[7054]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fa2b95b24f0 a2=98 a3=0 items=0 ppid=7042 pid=7054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61333436653232366237323636346561396465313234373062 Sep 11 18:08:52.551924 kernel: docker0: port 1(veth6dd1382) entered blocking state Sep 11 18:08:52.551807 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:52.552078 kernel: docker0: port 1(veth6dd1382) entered disabled state Sep 11 18:08:52.548000 audit: ANOM_PROMISCUOUS dev=veth6dd1382 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:52.553661 kernel: veth6dd1382: entered allmulticast mode Sep 11 18:08:52.553686 kernel: veth6dd1382: entered promiscuous mode Sep 11 18:08:52.548000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811777d40 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.548000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:52.554000 audit[7075]: NETFILTER_CFG table=raw:124 family=2 entries=1 op=nft_register_rule pid=7075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:52.554000 audit[7075]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff9d82e910 a2=0 a3=0 items=0 ppid=2991 pid=7075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:52.554000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:52.556095 systemd-networkd[2304]: veth6dd1382: Link UP Sep 11 18:08:52.564017 kernel: eth0: renamed from vethae256f6 Sep 11 18:08:52.564071 kernel: docker0: port 1(veth6dd1382) entered blocking state Sep 11 18:08:52.565682 kernel: docker0: port 1(veth6dd1382) entered forwarding state Sep 11 18:08:52.565946 systemd-networkd[2304]: veth6dd1382: Gained carrier Sep 11 18:08:52.566447 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:52.574360 dockerd[2991]: time="2026-09-11T18:08:52.574340021Z" level=info msg="sbJoin: gwep4 ''->'32d670e9d1da', gwep6 ''->''" eid=32d670e9d1da ep=upbeat_noyce net=bridge nid=ad3b593e9776 Sep 11 18:08:52.994396 systemd[1]: Started sshd@24-12-10.0.0.33:22-118.194.249.186:33798.service - OpenSSH per-connection server daemon (118.194.249.186:33798). Sep 11 18:08:52.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-12-10.0.0.33:22-118.194.249.186:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:53.597114 systemd[1]: docker-a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03.scope: Deactivated successfully. Sep 11 18:08:53.610063 dockerd[2991]: time="2026-09-11T18:08:53.609972800Z" level=info msg="ignoring event" container=a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:53.610364 containerd[2527]: time="2026-09-11T18:08:53.610067403Z" level=info msg="shim disconnected" id=a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03 namespace=moby Sep 11 18:08:53.610364 containerd[2527]: time="2026-09-11T18:08:53.610094601Z" level=info msg="cleaning up after shim disconnected" id=a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03 namespace=moby Sep 11 18:08:53.610364 containerd[2527]: time="2026-09-11T18:08:53.610101779Z" level=info msg="cleaning up dead shim" id=a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03 namespace=moby Sep 11 18:08:53.633021 kernel: docker0: port 1(veth6dd1382) entered disabled state Sep 11 18:08:53.633116 systemd-networkd[2304]: veth6dd1382: Lost carrier Sep 11 18:08:53.634041 kernel: vethae256f6: renamed from eth0 Sep 11 18:08:53.650000 audit[7110]: NETFILTER_CFG table=raw:125 family=2 entries=1 op=nft_unregister_rule pid=7110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:53.652895 kernel: kauditd_printk_skb: 135 callbacks suppressed Sep 11 18:08:53.652931 kernel: audit: type=1325 audit(1789150133.650:1013): table=raw:125 family=2 entries=1 op=nft_unregister_rule pid=7110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:53.650000 audit[7110]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdba0d5190 a2=0 a3=0 items=0 ppid=2991 pid=7110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.658857 kernel: audit: type=1300 audit(1789150133.650:1013): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdba0d5190 a2=0 a3=0 items=0 ppid=2991 pid=7110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.650000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:53.661898 kernel: audit: type=1327 audit(1789150133.650:1013): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:53.664753 systemd-networkd[2304]: veth6dd1382: Link DOWN Sep 11 18:08:53.666023 kernel: docker0: port 1(veth6dd1382) entered disabled state Sep 11 18:08:53.663000 audit: ANOM_PROMISCUOUS dev=veth6dd1382 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:53.669224 kernel: veth6dd1382 (unregistering): left allmulticast mode Sep 11 18:08:53.669250 kernel: veth6dd1382 (unregistering): left promiscuous mode Sep 11 18:08:53.669274 kernel: docker0: port 1(veth6dd1382) entered disabled state Sep 11 18:08:53.669287 kernel: audit: type=1700 audit(1789150133.663:1014): dev=veth6dd1382 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:53.663000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8114b48c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.685431 systemd[1]: run-docker-netns-742f754f43d4.mount: Deactivated successfully. Sep 11 18:08:53.663000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:53.691136 systemd[1]: var-lib-docker-rootfs-overlayfs-a346e226b72664ea9de12470b8e630f6ca3e8afe8bfbedc057034757b25efe03.mount: Deactivated successfully. Sep 11 18:08:53.692808 kernel: audit: type=1300 audit(1789150133.663:1014): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8114b48c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.692853 kernel: audit: type=1327 audit(1789150133.663:1014): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:53.711000 audit: BPF prog-id=271 op=UNLOAD Sep 11 18:08:53.711000 audit: BPF prog-id=275 op=UNLOAD Sep 11 18:08:53.714177 kernel: audit: type=1334 audit(1789150133.711:1015): prog-id=271 op=UNLOAD Sep 11 18:08:53.714223 kernel: audit: type=1334 audit(1789150133.711:1016): prog-id=275 op=UNLOAD Sep 11 18:08:53.895372 containerd[2527]: time="2026-09-11T18:08:53.895336852Z" level=info msg="connecting to shim f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a" address="unix:///run/containerd/s/9274e2f612a6c7d7ebb9cea10a3ef8600b4c905f4fd3bc0783af8340eeef3050" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:53.918185 systemd[1]: Started docker-f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a.scope - libcontainer container f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a. Sep 11 18:08:53.919727 sshd[7085]: Connection closed by authenticating user root 118.194.249.186 port 33798 [preauth] Sep 11 18:08:53.919000 audit[7085]: AUDIT1109 pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:53.924036 kernel: audit: type=1109 audit(1789150133.919:1017): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:53.925906 systemd[1]: sshd@24-12-10.0.0.33:22-118.194.249.186:33798.service: Deactivated successfully. Sep 11 18:08:53.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-12-10.0.0.33:22-118.194.249.186:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:53.933064 kernel: audit: type=1131 audit(1789150133.925:1018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-12-10.0.0.33:22-118.194.249.186:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:53.933000 audit: BPF prog-id=276 op=LOAD Sep 11 18:08:53.933000 audit: BPF prog-id=277 op=LOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b1fe0fa9fd8 a2=98 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.933000 audit: BPF prog-id=277 op=UNLOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.933000 audit: BPF prog-id=278 op=LOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b1fe0faa290 a2=98 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.933000 audit: BPF prog-id=279 op=LOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=b1fe0fa9fe8 a2=98 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.933000 audit: BPF prog-id=279 op=UNLOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.933000 audit: BPF prog-id=278 op=UNLOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.933000 audit: BPF prog-id=280 op=LOAD Sep 11 18:08:53.933000 audit[7139]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b1fe0faa4f0 a2=98 a3=0 items=0 ppid=7128 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66376366373934663364643533643462303364396436646461 Sep 11 18:08:53.954861 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:53.956372 kernel: docker0: port 1(vethb15bb60) entered blocking state Sep 11 18:08:53.956424 kernel: docker0: port 1(vethb15bb60) entered disabled state Sep 11 18:08:53.957379 kernel: vethb15bb60: entered allmulticast mode Sep 11 18:08:53.958311 kernel: vethb15bb60: entered promiscuous mode Sep 11 18:08:53.953000 audit: ANOM_PROMISCUOUS dev=vethb15bb60 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:53.953000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155fcb0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.953000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:53.959000 audit[7162]: NETFILTER_CFG table=raw:126 family=2 entries=1 op=nft_register_rule pid=7162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:53.959000 audit[7162]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffcc7059e60 a2=0 a3=0 items=0 ppid=2991 pid=7162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:53.959000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:53.960768 systemd-networkd[2304]: vethb15bb60: Link UP Sep 11 18:08:53.971044 kernel: eth0: renamed from vethb751df2 Sep 11 18:08:53.973522 kernel: docker0: port 1(vethb15bb60) entered blocking state Sep 11 18:08:53.973112 systemd-networkd[2304]: vethb15bb60: Gained carrier Sep 11 18:08:53.973621 kernel: docker0: port 1(vethb15bb60) entered forwarding state Sep 11 18:08:53.973381 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:53.995628 dockerd[2991]: time="2026-09-11T18:08:53.995600242Z" level=info msg="sbJoin: gwep4 ''->'d7ff0f946bb5', gwep6 ''->''" eid=d7ff0f946bb5 ep=musing_goldstine net=bridge nid=ad3b593e9776 Sep 11 18:08:54.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4110-10.0.0.33:22-118.194.249.186:48166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:54.155382 systemd[1]: Started sshd@25-4110-10.0.0.33:22-118.194.249.186:48166.service - OpenSSH per-connection server daemon (118.194.249.186:48166). Sep 11 18:08:55.020250 systemd[1]: docker-f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a.scope: Deactivated successfully. Sep 11 18:08:55.033314 containerd[2527]: time="2026-09-11T18:08:55.033275875Z" level=info msg="shim disconnected" id=f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a namespace=moby Sep 11 18:08:55.033314 containerd[2527]: time="2026-09-11T18:08:55.033304627Z" level=info msg="cleaning up after shim disconnected" id=f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a namespace=moby Sep 11 18:08:55.033314 containerd[2527]: time="2026-09-11T18:08:55.033314080Z" level=info msg="cleaning up dead shim" id=f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a namespace=moby Sep 11 18:08:55.034205 dockerd[2991]: time="2026-09-11T18:08:55.034161019Z" level=info msg="ignoring event" container=f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:55.056017 kernel: docker0: port 1(vethb15bb60) entered disabled state Sep 11 18:08:55.056151 systemd-networkd[2304]: vethb15bb60: Lost carrier Sep 11 18:08:55.057174 kernel: vethb751df2: renamed from eth0 Sep 11 18:08:55.076000 audit[7196]: NETFILTER_CFG table=raw:127 family=2 entries=1 op=nft_unregister_rule pid=7196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:55.076000 audit[7196]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffde587e530 a2=0 a3=0 items=0 ppid=2991 pid=7196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.076000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:55.081175 sshd[7171]: Connection closed by authenticating user root 118.194.249.186 port 48166 [preauth] Sep 11 18:08:55.083029 kernel: docker0: port 1(vethb15bb60) entered disabled state Sep 11 18:08:55.083145 systemd-networkd[2304]: vethb15bb60: Link DOWN Sep 11 18:08:55.086136 kernel: vethb15bb60 (unregistering): left allmulticast mode Sep 11 18:08:55.086193 kernel: vethb15bb60 (unregistering): left promiscuous mode Sep 11 18:08:55.080000 audit: ANOM_PROMISCUOUS dev=vethb15bb60 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:55.087341 kernel: docker0: port 1(vethb15bb60) entered disabled state Sep 11 18:08:55.086000 audit[7171]: AUDIT1109 pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:55.088866 systemd[1]: sshd@25-4110-10.0.0.33:22-118.194.249.186:48166.service: Deactivated successfully. Sep 11 18:08:55.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-4110-10.0.0.33:22-118.194.249.186:48166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:55.080000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8113d1f60 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.080000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:55.097749 systemd[1]: run-docker-netns-6f31592c8c0b.mount: Deactivated successfully. Sep 11 18:08:55.103091 systemd[1]: var-lib-docker-rootfs-overlayfs-f7cf794f3dd53d4b03d9d6ddad807c2e9acb651d44e294a16bd5d35f0006f87a.mount: Deactivated successfully. Sep 11 18:08:55.109000 audit: BPF prog-id=276 op=UNLOAD Sep 11 18:08:55.109000 audit: BPF prog-id=280 op=UNLOAD Sep 11 18:08:55.238180 systemd[1]: tmp-containerd\x2dmount2377827848.mount: Deactivated successfully. Sep 11 18:08:55.323779 containerd[2527]: time="2026-09-11T18:08:55.323698981Z" level=info msg="connecting to shim eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf" address="unix:///run/containerd/s/c21b41eae685c184962a82aa6f5556854a9cce2263d36478569f911e12c06279" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:55.330312 systemd[1]: Started sshd@26-4111-10.0.0.33:22-118.194.249.186:60878.service - OpenSSH per-connection server daemon (118.194.249.186:60878). Sep 11 18:08:55.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-4111-10.0.0.33:22-118.194.249.186:60878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:55.352192 systemd[1]: Started docker-eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf.scope - libcontainer container eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf. Sep 11 18:08:55.359000 audit: BPF prog-id=281 op=LOAD Sep 11 18:08:55.360000 audit: BPF prog-id=282 op=LOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2183637a3fd8 a2=98 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.360000 audit: BPF prog-id=282 op=UNLOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.360000 audit: BPF prog-id=283 op=LOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2183637a4290 a2=98 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.360000 audit: BPF prog-id=284 op=LOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2183637a3fe8 a2=98 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.360000 audit: BPF prog-id=284 op=UNLOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.360000 audit: BPF prog-id=283 op=UNLOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.360000 audit: BPF prog-id=285 op=LOAD Sep 11 18:08:55.360000 audit[7228]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2183637a44f0 a2=98 a3=0 items=0 ppid=7216 pid=7228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65616661303764393835623731383438656239653865373531 Sep 11 18:08:55.386017 kernel: docker0: port 1(veth34efc20) entered blocking state Sep 11 18:08:55.385835 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:55.386158 kernel: docker0: port 1(veth34efc20) entered disabled state Sep 11 18:08:55.388021 kernel: veth34efc20: entered allmulticast mode Sep 11 18:08:55.388071 kernel: veth34efc20: entered promiscuous mode Sep 11 18:08:55.382000 audit: ANOM_PROMISCUOUS dev=veth34efc20 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:55.382000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f11680 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.382000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:55.392000 audit[7253]: NETFILTER_CFG table=raw:128 family=2 entries=1 op=nft_register_rule pid=7253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:55.392000 audit[7253]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe08369b60 a2=0 a3=0 items=0 ppid=2991 pid=7253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:55.392000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:55.394114 systemd-networkd[2304]: veth34efc20: Link UP Sep 11 18:08:55.402024 kernel: eth0: renamed from veth5fef01a Sep 11 18:08:55.402078 kernel: docker0: port 1(veth34efc20) entered blocking state Sep 11 18:08:55.404189 kernel: docker0: port 1(veth34efc20) entered forwarding state Sep 11 18:08:55.404567 systemd-networkd[2304]: veth34efc20: Gained carrier Sep 11 18:08:55.404915 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:55.413987 dockerd[2991]: time="2026-09-11T18:08:55.413964866Z" level=info msg="sbJoin: gwep4 ''->'260a443cff8f', gwep6 ''->''" eid=260a443cff8f ep=hardcore_pike net=bridge nid=ad3b593e9776 Sep 11 18:08:56.276581 sshd[7226]: Connection closed by authenticating user root 118.194.249.186 port 60878 [preauth] Sep 11 18:08:56.276000 audit[7226]: AUDIT1109 pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:56.278510 systemd[1]: sshd@26-4111-10.0.0.33:22-118.194.249.186:60878.service: Deactivated successfully. Sep 11 18:08:56.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-4111-10.0.0.33:22-118.194.249.186:60878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:56.437627 systemd[1]: docker-eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf.scope: Deactivated successfully. Sep 11 18:08:56.449816 dockerd[2991]: time="2026-09-11T18:08:56.449772539Z" level=info msg="ignoring event" container=eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:56.450629 containerd[2527]: time="2026-09-11T18:08:56.450420275Z" level=info msg="shim disconnected" id=eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf namespace=moby Sep 11 18:08:56.450629 containerd[2527]: time="2026-09-11T18:08:56.450476768Z" level=info msg="cleaning up after shim disconnected" id=eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf namespace=moby Sep 11 18:08:56.450629 containerd[2527]: time="2026-09-11T18:08:56.450485538Z" level=info msg="cleaning up dead shim" id=eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf namespace=moby Sep 11 18:08:56.473318 kernel: docker0: port 1(veth34efc20) entered disabled state Sep 11 18:08:56.473116 systemd-networkd[2304]: veth34efc20: Lost carrier Sep 11 18:08:56.473580 kernel: veth5fef01a: renamed from eth0 Sep 11 18:08:56.488000 audit[7285]: NETFILTER_CFG table=raw:129 family=2 entries=1 op=nft_unregister_rule pid=7285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:56.488000 audit[7285]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffca60b3bd0 a2=0 a3=0 items=0 ppid=2991 pid=7285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.488000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:56.499519 systemd-networkd[2304]: veth34efc20: Link DOWN Sep 11 18:08:56.502121 kernel: docker0: port 1(veth34efc20) entered disabled state Sep 11 18:08:56.502263 kernel: veth34efc20 (unregistering): left allmulticast mode Sep 11 18:08:56.503304 kernel: veth34efc20 (unregistering): left promiscuous mode Sep 11 18:08:56.504446 kernel: docker0: port 1(veth34efc20) entered disabled state Sep 11 18:08:56.498000 audit: ANOM_PROMISCUOUS dev=veth34efc20 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:56.498000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8afa0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.498000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:56.516099 systemd[1]: run-docker-netns-8b240b5caf3e.mount: Deactivated successfully. Sep 11 18:08:56.518366 systemd[1]: var-lib-docker-rootfs-overlayfs-eafa07d985b71848eb9e8e751eb3189c57eb62d5b63c704ea13520b8834ffbcf.mount: Deactivated successfully. Sep 11 18:08:56.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4112-10.0.0.33:22-118.194.249.186:49960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:56.519915 systemd[1]: Started sshd@27-4112-10.0.0.33:22-118.194.249.186:49960.service - OpenSSH per-connection server daemon (118.194.249.186:49960). Sep 11 18:08:56.529000 audit: BPF prog-id=281 op=UNLOAD Sep 11 18:08:56.529000 audit: BPF prog-id=285 op=UNLOAD Sep 11 18:08:56.727500 containerd[2527]: time="2026-09-11T18:08:56.727462014Z" level=info msg="connecting to shim 28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5" address="unix:///run/containerd/s/020fe04fed65c8b822112600e03b862b3805548b8935905fbd5890418f3161a5" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:56.747176 systemd[1]: Started docker-28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5.scope - libcontainer container 28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5. Sep 11 18:08:56.755000 audit: BPF prog-id=286 op=LOAD Sep 11 18:08:56.755000 audit: BPF prog-id=287 op=LOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=20c7f96bffd8 a2=98 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.755000 audit: BPF prog-id=287 op=UNLOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.755000 audit: BPF prog-id=288 op=LOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=20c7f96c0290 a2=98 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.755000 audit: BPF prog-id=289 op=LOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=20c7f96bffe8 a2=98 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.755000 audit: BPF prog-id=289 op=UNLOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.755000 audit: BPF prog-id=288 op=UNLOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.755000 audit: BPF prog-id=290 op=LOAD Sep 11 18:08:56.755000 audit[7318]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=20c7f96c04f0 a2=98 a3=0 items=0 ppid=7307 pid=7318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32386135386536656234623264633030643137396436623131 Sep 11 18:08:56.782968 kernel: docker0: port 1(veth6449935) entered blocking state Sep 11 18:08:56.783157 kernel: docker0: port 1(veth6449935) entered disabled state Sep 11 18:08:56.783178 kernel: veth6449935: entered allmulticast mode Sep 11 18:08:56.785174 kernel: veth6449935: entered promiscuous mode Sep 11 18:08:56.779000 audit: ANOM_PROMISCUOUS dev=veth6449935 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:56.779000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a0f60 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.779000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:56.786747 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:56.790000 audit[7341]: NETFILTER_CFG table=raw:130 family=2 entries=1 op=nft_register_rule pid=7341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:56.790000 audit[7341]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc88cd0cd0 a2=0 a3=0 items=0 ppid=2991 pid=7341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:56.790000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:56.792342 systemd-networkd[2304]: veth6449935: Link UP Sep 11 18:08:56.801103 kernel: eth0: renamed from veth633e998 Sep 11 18:08:56.801299 kernel: docker0: port 1(veth6449935) entered blocking state Sep 11 18:08:56.801363 kernel: docker0: port 1(veth6449935) entered forwarding state Sep 11 18:08:56.801631 systemd-networkd[2304]: veth6449935: Gained carrier Sep 11 18:08:56.801823 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:56.809329 dockerd[2991]: time="2026-09-11T18:08:56.809308207Z" level=info msg="sbJoin: gwep4 ''->'81bb0e9a8891', gwep6 ''->''" eid=81bb0e9a8891 ep=gracious_archimedes net=bridge nid=ad3b593e9776 Sep 11 18:08:57.466778 sshd[7287]: Connection closed by authenticating user root 118.194.249.186 port 49960 [preauth] Sep 11 18:08:57.466000 audit[7287]: AUDIT1109 pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:57.468626 systemd[1]: sshd@27-4112-10.0.0.33:22-118.194.249.186:49960.service: Deactivated successfully. Sep 11 18:08:57.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4112-10.0.0.33:22-118.194.249.186:49960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:57.705943 systemd[1]: Started sshd@28-4113-10.0.0.33:22-118.194.249.186:38624.service - OpenSSH per-connection server daemon (118.194.249.186:38624). Sep 11 18:08:57.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-4113-10.0.0.33:22-118.194.249.186:38624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:57.830790 systemd[1]: docker-28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5.scope: Deactivated successfully. Sep 11 18:08:57.842637 containerd[2527]: time="2026-09-11T18:08:57.842515141Z" level=info msg="shim disconnected" id=28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5 namespace=moby Sep 11 18:08:57.842637 containerd[2527]: time="2026-09-11T18:08:57.842600929Z" level=info msg="cleaning up after shim disconnected" id=28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5 namespace=moby Sep 11 18:08:57.842637 containerd[2527]: time="2026-09-11T18:08:57.842608354Z" level=info msg="cleaning up dead shim" id=28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5 namespace=moby Sep 11 18:08:57.842941 dockerd[2991]: time="2026-09-11T18:08:57.842655111Z" level=info msg="ignoring event" container=28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:57.871694 systemd-networkd[2304]: veth6449935: Lost carrier Sep 11 18:08:57.872532 kernel: docker0: port 1(veth6449935) entered disabled state Sep 11 18:08:57.872597 kernel: veth633e998: renamed from eth0 Sep 11 18:08:57.892000 audit[7379]: NETFILTER_CFG table=raw:131 family=2 entries=1 op=nft_unregister_rule pid=7379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:57.892000 audit[7379]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd10d4b180 a2=0 a3=0 items=0 ppid=2991 pid=7379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:57.892000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:57.899306 systemd-networkd[2304]: veth6449935: Link DOWN Sep 11 18:08:57.901866 kernel: docker0: port 1(veth6449935) entered disabled state Sep 11 18:08:57.901919 kernel: veth6449935 (unregistering): left allmulticast mode Sep 11 18:08:57.898000 audit: ANOM_PROMISCUOUS dev=veth6449935 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:57.903814 kernel: veth6449935 (unregistering): left promiscuous mode Sep 11 18:08:57.903860 kernel: docker0: port 1(veth6449935) entered disabled state Sep 11 18:08:57.898000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e0f00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:57.898000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:57.911535 systemd[1]: run-docker-netns-44e4b508e6d9.mount: Deactivated successfully. Sep 11 18:08:57.914101 systemd[1]: var-lib-docker-rootfs-overlayfs-28a58e6eb4b2dc00d179d6b114274d2b5c7fbc97d5021caca00e91dfbeedead5.mount: Deactivated successfully. Sep 11 18:08:57.922000 audit: BPF prog-id=286 op=UNLOAD Sep 11 18:08:57.922000 audit: BPF prog-id=290 op=UNLOAD Sep 11 18:08:58.016825 systemd[1]: tmp-containerd\x2dmount2260858510.mount: Deactivated successfully. Sep 11 18:08:58.097479 containerd[2527]: time="2026-09-11T18:08:58.097373054Z" level=info msg="connecting to shim 3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329" address="unix:///run/containerd/s/7654fc3431b7d8ba994a1d8fee961866b72659175bc391c60058d958e41d2388" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:58.117180 systemd[1]: Started docker-3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329.scope - libcontainer container 3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329. Sep 11 18:08:58.125000 audit: BPF prog-id=291 op=LOAD Sep 11 18:08:58.125000 audit: BPF prog-id=292 op=LOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=233453659fd8 a2=98 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.125000 audit: BPF prog-id=292 op=UNLOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.125000 audit: BPF prog-id=293 op=LOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=23345365a290 a2=98 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.125000 audit: BPF prog-id=294 op=LOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=233453659fe8 a2=98 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.125000 audit: BPF prog-id=294 op=UNLOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.125000 audit: BPF prog-id=293 op=UNLOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.125000 audit: BPF prog-id=295 op=LOAD Sep 11 18:08:58.125000 audit[7407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=23345365a4f0 a2=98 a3=0 items=0 ppid=7396 pid=7407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.125000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33646331643262323066633939396235346363343566313233 Sep 11 18:08:58.147102 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:58.148349 kernel: docker0: port 1(veth50aea90) entered blocking state Sep 11 18:08:58.148384 kernel: docker0: port 1(veth50aea90) entered disabled state Sep 11 18:08:58.148411 kernel: veth50aea90: entered allmulticast mode Sep 11 18:08:58.145000 audit: ANOM_PROMISCUOUS dev=veth50aea90 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:58.145000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e7a70 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.150503 kernel: veth50aea90: entered promiscuous mode Sep 11 18:08:58.145000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:58.151000 audit[7429]: NETFILTER_CFG table=raw:132 family=2 entries=1 op=nft_register_rule pid=7429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:58.151000 audit[7429]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffcd634b800 a2=0 a3=0 items=0 ppid=2991 pid=7429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:58.151000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:58.153619 systemd-networkd[2304]: veth50aea90: Link UP Sep 11 18:08:58.163024 kernel: eth0: renamed from veth02ed2a4 Sep 11 18:08:58.163077 kernel: docker0: port 1(veth50aea90) entered blocking state Sep 11 18:08:58.164493 kernel: docker0: port 1(veth50aea90) entered forwarding state Sep 11 18:08:58.164787 systemd-networkd[2304]: veth50aea90: Gained carrier Sep 11 18:08:58.165050 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:58.174790 dockerd[2991]: time="2026-09-11T18:08:58.174768811Z" level=info msg="sbJoin: gwep4 ''->'0869b3c9ffac', gwep6 ''->''" eid=0869b3c9ffac ep=stoic_margulis net=bridge nid=ad3b593e9776 Sep 11 18:08:58.653687 sshd[7353]: Connection closed by authenticating user root 118.194.249.186 port 38624 [preauth] Sep 11 18:08:58.653000 audit[7353]: AUDIT1109 pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:58.655111 systemd[1]: sshd@28-4113-10.0.0.33:22-118.194.249.186:38624.service: Deactivated successfully. Sep 11 18:08:58.656357 kernel: kauditd_printk_skb: 146 callbacks suppressed Sep 11 18:08:58.656390 kernel: audit: type=1109 audit(1789150138.653:1081): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:58.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-4113-10.0.0.33:22-118.194.249.186:38624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:58.663109 kernel: audit: type=1131 audit(1789150138.654:1082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-4113-10.0.0.33:22-118.194.249.186:38624 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:58.903454 systemd[1]: Started sshd@29-13-10.0.0.33:22-118.194.249.186:55172.service - OpenSSH per-connection server daemon (118.194.249.186:55172). Sep 11 18:08:58.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-13-10.0.0.33:22-118.194.249.186:55172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:58.908031 kernel: audit: type=1130 audit(1789150138.902:1083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-13-10.0.0.33:22-118.194.249.186:55172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:08:59.204080 systemd[1]: docker-3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329.scope: Deactivated successfully. Sep 11 18:08:59.216442 containerd[2527]: time="2026-09-11T18:08:59.216407246Z" level=info msg="shim disconnected" id=3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329 namespace=moby Sep 11 18:08:59.216832 containerd[2527]: time="2026-09-11T18:08:59.216763348Z" level=info msg="cleaning up after shim disconnected" id=3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329 namespace=moby Sep 11 18:08:59.216832 containerd[2527]: time="2026-09-11T18:08:59.216778169Z" level=info msg="cleaning up dead shim" id=3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329 namespace=moby Sep 11 18:08:59.216880 dockerd[2991]: time="2026-09-11T18:08:59.216640090Z" level=info msg="ignoring event" container=3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:08:59.243286 kernel: docker0: port 1(veth50aea90) entered disabled state Sep 11 18:08:59.243361 kernel: veth02ed2a4: renamed from eth0 Sep 11 18:08:59.243389 systemd-networkd[2304]: veth50aea90: Lost carrier Sep 11 18:08:59.263000 audit[7467]: NETFILTER_CFG table=raw:133 family=2 entries=1 op=nft_unregister_rule pid=7467 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:59.263000 audit[7467]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc2f528e50 a2=0 a3=0 items=0 ppid=2991 pid=7467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.268320 kernel: audit: type=1325 audit(1789150139.263:1084): table=raw:133 family=2 entries=1 op=nft_unregister_rule pid=7467 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:59.268359 kernel: audit: type=1300 audit(1789150139.263:1084): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc2f528e50 a2=0 a3=0 items=0 ppid=2991 pid=7467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:59.274261 kernel: audit: type=1327 audit(1789150139.263:1084): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:59.276113 systemd-networkd[2304]: veth50aea90: Link DOWN Sep 11 18:08:59.280042 kernel: docker0: port 1(veth50aea90) entered disabled state Sep 11 18:08:59.280094 kernel: veth50aea90 (unregistering): left allmulticast mode Sep 11 18:08:59.280112 kernel: veth50aea90 (unregistering): left promiscuous mode Sep 11 18:08:59.280133 kernel: docker0: port 1(veth50aea90) entered disabled state Sep 11 18:08:59.273000 audit: ANOM_PROMISCUOUS dev=veth50aea90 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:59.282225 kernel: audit: type=1700 audit(1789150139.273:1085): dev=veth50aea90 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:59.273000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbb9a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.293024 kernel: audit: type=1300 audit(1789150139.273:1085): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbb9a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.273000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:59.298029 kernel: audit: type=1327 audit(1789150139.273:1085): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:59.298223 systemd[1]: run-docker-netns-7b2b244be5b6.mount: Deactivated successfully. Sep 11 18:08:59.306573 systemd[1]: var-lib-docker-rootfs-overlayfs-3dc1d2b20fc999b54cc45f123aba8e0bb2ed9357722c7e1fc780248e5d08e329.mount: Deactivated successfully. Sep 11 18:08:59.312000 audit: BPF prog-id=291 op=UNLOAD Sep 11 18:08:59.312000 audit: BPF prog-id=295 op=UNLOAD Sep 11 18:08:59.315033 kernel: audit: type=1334 audit(1789150139.312:1086): prog-id=291 op=UNLOAD Sep 11 18:08:59.526895 containerd[2527]: time="2026-09-11T18:08:59.526422519Z" level=info msg="connecting to shim 3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5" address="unix:///run/containerd/s/6993581eb3948fcafbb42b2ae23c8a2951210c011d8a69dd6125a094035618ed" namespace=moby protocol=ttrpc version=3 Sep 11 18:08:59.548196 systemd[1]: Started docker-3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5.scope - libcontainer container 3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5. Sep 11 18:08:59.555000 audit: BPF prog-id=296 op=LOAD Sep 11 18:08:59.556000 audit: BPF prog-id=297 op=LOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=38cf326a9fd8 a2=98 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.556000 audit: BPF prog-id=297 op=UNLOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.556000 audit: BPF prog-id=298 op=LOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=38cf326aa290 a2=98 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.556000 audit: BPF prog-id=299 op=LOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=38cf326a9fe8 a2=98 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.556000 audit: BPF prog-id=299 op=UNLOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.556000 audit: BPF prog-id=298 op=UNLOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.556000 audit: BPF prog-id=300 op=LOAD Sep 11 18:08:59.556000 audit[7496]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=38cf326aa4f0 a2=98 a3=0 items=0 ppid=7485 pid=7496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33616233613865316637616134316234336563336366323439 Sep 11 18:08:59.581107 kernel: docker0: port 1(veth82dc79d) entered blocking state Sep 11 18:08:59.581250 kernel: docker0: port 1(veth82dc79d) entered disabled state Sep 11 18:08:59.582529 kernel: veth82dc79d: entered allmulticast mode Sep 11 18:08:59.577000 audit: ANOM_PROMISCUOUS dev=veth82dc79d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:08:59.577000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812077bf0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.577000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:08:59.584871 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:08:59.587070 kernel: veth82dc79d: entered promiscuous mode Sep 11 18:08:59.586000 audit[7517]: NETFILTER_CFG table=raw:134 family=2 entries=1 op=nft_register_rule pid=7517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:08:59.586000 audit[7517]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd9e5a97c0 a2=0 a3=0 items=0 ppid=2991 pid=7517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:08:59.586000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:08:59.587838 systemd-networkd[2304]: veth82dc79d: Link UP Sep 11 18:08:59.597025 kernel: eth0: renamed from veth5753e37 Sep 11 18:08:59.600117 kernel: docker0: port 1(veth82dc79d) entered blocking state Sep 11 18:08:59.599815 systemd-networkd[2304]: veth82dc79d: Gained carrier Sep 11 18:08:59.600246 kernel: docker0: port 1(veth82dc79d) entered forwarding state Sep 11 18:08:59.599994 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:08:59.608430 dockerd[2991]: time="2026-09-11T18:08:59.608404664Z" level=info msg="sbJoin: gwep4 ''->'bfe72dfe7d55', gwep6 ''->''" eid=bfe72dfe7d55 ep=nifty_bartik net=bridge nid=ad3b593e9776 Sep 11 18:08:59.848881 sshd[7441]: Connection closed by authenticating user root 118.194.249.186 port 55172 [preauth] Sep 11 18:08:59.848000 audit[7441]: AUDIT1109 pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:08:59.850816 systemd[1]: sshd@29-13-10.0.0.33:22-118.194.249.186:55172.service: Deactivated successfully. Sep 11 18:08:59.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-13-10.0.0.33:22-118.194.249.186:55172 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:00.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-4114-10.0.0.33:22-118.194.249.186:45416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:00.091450 systemd[1]: Started sshd@30-4114-10.0.0.33:22-118.194.249.186:45416.service - OpenSSH per-connection server daemon (118.194.249.186:45416). Sep 11 18:09:00.631664 systemd[1]: docker-3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5.scope: Deactivated successfully. Sep 11 18:09:00.642873 dockerd[2991]: time="2026-09-11T18:09:00.642830432Z" level=info msg="ignoring event" container=3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:00.644025 containerd[2527]: time="2026-09-11T18:09:00.643853956Z" level=info msg="shim disconnected" id=3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5 namespace=moby Sep 11 18:09:00.644025 containerd[2527]: time="2026-09-11T18:09:00.643890281Z" level=info msg="cleaning up after shim disconnected" id=3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5 namespace=moby Sep 11 18:09:00.644025 containerd[2527]: time="2026-09-11T18:09:00.643902339Z" level=info msg="cleaning up dead shim" id=3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5 namespace=moby Sep 11 18:09:00.668349 systemd-networkd[2304]: veth82dc79d: Lost carrier Sep 11 18:09:00.669027 kernel: docker0: port 1(veth82dc79d) entered disabled state Sep 11 18:09:00.669070 kernel: veth5753e37: renamed from eth0 Sep 11 18:09:00.687000 audit[7553]: NETFILTER_CFG table=raw:135 family=2 entries=1 op=nft_unregister_rule pid=7553 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:00.687000 audit[7553]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdd914ffd0 a2=0 a3=0 items=0 ppid=2991 pid=7553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.687000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:00.690855 systemd-networkd[2304]: veth82dc79d: Link DOWN Sep 11 18:09:00.693086 kernel: docker0: port 1(veth82dc79d) entered disabled state Sep 11 18:09:00.689000 audit: ANOM_PROMISCUOUS dev=veth82dc79d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:00.696266 kernel: veth82dc79d (unregistering): left allmulticast mode Sep 11 18:09:00.696292 kernel: veth82dc79d (unregistering): left promiscuous mode Sep 11 18:09:00.696309 kernel: docker0: port 1(veth82dc79d) entered disabled state Sep 11 18:09:00.689000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76b60 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.689000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:00.710670 systemd[1]: run-docker-netns-c370cee87869.mount: Deactivated successfully. Sep 11 18:09:00.714999 systemd[1]: var-lib-docker-rootfs-overlayfs-3ab3a8e1f7aa41b43ec3cf24996041784b77a1878f0f9450c240e50791ebdcc5.mount: Deactivated successfully. Sep 11 18:09:00.722000 audit: BPF prog-id=296 op=UNLOAD Sep 11 18:09:00.722000 audit: BPF prog-id=300 op=UNLOAD Sep 11 18:09:00.811893 systemd[1]: tmp-containerd\x2dmount1429048306.mount: Deactivated successfully. Sep 11 18:09:00.881324 containerd[2527]: time="2026-09-11T18:09:00.881281080Z" level=info msg="connecting to shim 7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4" address="unix:///run/containerd/s/eec1ddd99b60c515e8610cb84e66df61efdd711043ccfce12486dd21cc001efd" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:00.902172 systemd[1]: Started docker-7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4.scope - libcontainer container 7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4. Sep 11 18:09:00.910000 audit: BPF prog-id=301 op=LOAD Sep 11 18:09:00.910000 audit: BPF prog-id=302 op=LOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=28703c89bfd8 a2=98 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.910000 audit: BPF prog-id=302 op=UNLOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.910000 audit: BPF prog-id=303 op=LOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=28703c89c290 a2=98 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.910000 audit: BPF prog-id=304 op=LOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=28703c89bfe8 a2=98 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.910000 audit: BPF prog-id=304 op=UNLOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.910000 audit: BPF prog-id=303 op=UNLOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.910000 audit: BPF prog-id=305 op=LOAD Sep 11 18:09:00.910000 audit[7581]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=28703c89c4f0 a2=98 a3=0 items=0 ppid=7570 pid=7581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.910000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37626162626461326139623365346432323761343930633530 Sep 11 18:09:00.933810 kernel: docker0: port 1(veth19f7eb5) entered blocking state Sep 11 18:09:00.933874 kernel: docker0: port 1(veth19f7eb5) entered disabled state Sep 11 18:09:00.933874 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:00.934046 kernel: veth19f7eb5: entered allmulticast mode Sep 11 18:09:00.935548 kernel: veth19f7eb5: entered promiscuous mode Sep 11 18:09:00.930000 audit: ANOM_PROMISCUOUS dev=veth19f7eb5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:00.930000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b66600 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.930000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:00.937000 audit[7602]: NETFILTER_CFG table=raw:136 family=2 entries=1 op=nft_register_rule pid=7602 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:00.937000 audit[7602]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffc8dcc010 a2=0 a3=0 items=0 ppid=2991 pid=7602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:00.937000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:00.939115 systemd-networkd[2304]: veth19f7eb5: Link UP Sep 11 18:09:00.948028 kernel: eth0: renamed from vetheab1a94 Sep 11 18:09:00.948139 kernel: docker0: port 1(veth19f7eb5) entered blocking state Sep 11 18:09:00.949619 kernel: docker0: port 1(veth19f7eb5) entered forwarding state Sep 11 18:09:00.950060 systemd-networkd[2304]: veth19f7eb5: Gained carrier Sep 11 18:09:00.950263 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:00.956963 dockerd[2991]: time="2026-09-11T18:09:00.956942420Z" level=info msg="sbJoin: gwep4 ''->'342e2a08ded8', gwep6 ''->''" eid=342e2a08ded8 ep=kind_chaplygin net=bridge nid=ad3b593e9776 Sep 11 18:09:01.042256 sshd[7528]: Connection closed by authenticating user root 118.194.249.186 port 45416 [preauth] Sep 11 18:09:01.041000 audit[7528]: AUDIT1109 pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:01.043842 systemd[1]: sshd@30-4114-10.0.0.33:22-118.194.249.186:45416.service: Deactivated successfully. Sep 11 18:09:01.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-4114-10.0.0.33:22-118.194.249.186:45416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:01.272000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4115-10.0.0.33:22-118.194.249.186:59068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:01.272775 systemd[1]: Started sshd@31-4115-10.0.0.33:22-118.194.249.186:59068.service - OpenSSH per-connection server daemon (118.194.249.186:59068). Sep 11 18:09:01.981507 systemd[1]: docker-7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4.scope: Deactivated successfully. Sep 11 18:09:01.994535 dockerd[2991]: time="2026-09-11T18:09:01.994496468Z" level=info msg="ignoring event" container=7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:01.995069 containerd[2527]: time="2026-09-11T18:09:01.994712591Z" level=info msg="shim disconnected" id=7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4 namespace=moby Sep 11 18:09:01.995069 containerd[2527]: time="2026-09-11T18:09:01.994743547Z" level=info msg="cleaning up after shim disconnected" id=7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4 namespace=moby Sep 11 18:09:01.995069 containerd[2527]: time="2026-09-11T18:09:01.994754465Z" level=info msg="cleaning up dead shim" id=7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4 namespace=moby Sep 11 18:09:02.019403 systemd-networkd[2304]: veth19f7eb5: Lost carrier Sep 11 18:09:02.020023 kernel: docker0: port 1(veth19f7eb5) entered disabled state Sep 11 18:09:02.020059 kernel: vetheab1a94: renamed from eth0 Sep 11 18:09:02.041000 audit[7640]: NETFILTER_CFG table=raw:137 family=2 entries=1 op=nft_unregister_rule pid=7640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:02.041000 audit[7640]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc4389e2a0 a2=0 a3=0 items=0 ppid=2991 pid=7640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.041000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:02.047687 systemd-networkd[2304]: veth19f7eb5: Link DOWN Sep 11 18:09:02.049022 kernel: docker0: port 1(veth19f7eb5) entered disabled state Sep 11 18:09:02.051559 kernel: veth19f7eb5 (unregistering): left allmulticast mode Sep 11 18:09:02.051615 kernel: veth19f7eb5 (unregistering): left promiscuous mode Sep 11 18:09:02.046000 audit: ANOM_PROMISCUOUS dev=veth19f7eb5 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:02.052585 kernel: docker0: port 1(veth19f7eb5) entered disabled state Sep 11 18:09:02.046000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77440 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.046000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:02.066151 systemd[1]: run-docker-netns-86093512b810.mount: Deactivated successfully. Sep 11 18:09:02.068855 systemd[1]: var-lib-docker-rootfs-overlayfs-7babbda2a9b3e4d227a490c50644100d5145f2bfc414894d823da0efa9ef6ad4.mount: Deactivated successfully. Sep 11 18:09:02.077000 audit: BPF prog-id=301 op=UNLOAD Sep 11 18:09:02.077000 audit: BPF prog-id=305 op=UNLOAD Sep 11 18:09:02.206033 sshd[7614]: Connection closed by authenticating user root 118.194.249.186 port 59068 [preauth] Sep 11 18:09:02.205000 audit[7614]: AUDIT1109 pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:02.207340 systemd[1]: sshd@31-4115-10.0.0.33:22-118.194.249.186:59068.service: Deactivated successfully. Sep 11 18:09:02.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-4115-10.0.0.33:22-118.194.249.186:59068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:02.216436 systemd[1]: tmp-containerd\x2dmount1829527542.mount: Deactivated successfully. Sep 11 18:09:02.309501 containerd[2527]: time="2026-09-11T18:09:02.309417929Z" level=info msg="connecting to shim a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a" address="unix:///run/containerd/s/441a21a4c48f54c958265c2d35aa2c971a6bee70ac4daeb0d79494ffec50c559" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:02.329189 systemd[1]: Started docker-a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a.scope - libcontainer container a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a. Sep 11 18:09:02.336000 audit: BPF prog-id=306 op=LOAD Sep 11 18:09:02.336000 audit: BPF prog-id=307 op=LOAD Sep 11 18:09:02.336000 audit[7670]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1fbc5ac4bfd8 a2=98 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.336000 audit: BPF prog-id=307 op=UNLOAD Sep 11 18:09:02.336000 audit[7670]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.336000 audit: BPF prog-id=308 op=LOAD Sep 11 18:09:02.336000 audit[7670]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1fbc5ac4c290 a2=98 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.336000 audit: BPF prog-id=309 op=LOAD Sep 11 18:09:02.336000 audit[7670]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1fbc5ac4bfe8 a2=98 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.337000 audit: BPF prog-id=309 op=UNLOAD Sep 11 18:09:02.337000 audit[7670]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.337000 audit: BPF prog-id=308 op=UNLOAD Sep 11 18:09:02.337000 audit[7670]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.337000 audit: BPF prog-id=310 op=LOAD Sep 11 18:09:02.337000 audit[7670]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1fbc5ac4c4f0 a2=98 a3=0 items=0 ppid=7658 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61366661643330383236653565393038646138333731626439 Sep 11 18:09:02.358938 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:02.360900 kernel: docker0: port 1(veth7bf1f99) entered blocking state Sep 11 18:09:02.360961 kernel: docker0: port 1(veth7bf1f99) entered disabled state Sep 11 18:09:02.362530 kernel: veth7bf1f99: entered allmulticast mode Sep 11 18:09:02.357000 audit: ANOM_PROMISCUOUS dev=veth7bf1f99 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:02.363553 kernel: veth7bf1f99: entered promiscuous mode Sep 11 18:09:02.357000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111cf2f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.357000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:02.364000 audit[7690]: NETFILTER_CFG table=raw:138 family=2 entries=1 op=nft_register_rule pid=7690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:02.364000 audit[7690]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc0497ba70 a2=0 a3=0 items=0 ppid=2991 pid=7690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:02.364000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:02.366000 systemd-networkd[2304]: veth7bf1f99: Link UP Sep 11 18:09:02.385024 kernel: eth0: renamed from vetha7697bf Sep 11 18:09:02.385076 kernel: docker0: port 1(veth7bf1f99) entered blocking state Sep 11 18:09:02.386754 kernel: docker0: port 1(veth7bf1f99) entered forwarding state Sep 11 18:09:02.387083 systemd-networkd[2304]: veth7bf1f99: Gained carrier Sep 11 18:09:02.387308 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:02.409100 dockerd[2991]: time="2026-09-11T18:09:02.409062749Z" level=info msg="sbJoin: gwep4 ''->'969a11078b1f', gwep6 ''->''" eid=969a11078b1f ep=vigilant_hamilton net=bridge nid=ad3b593e9776 Sep 11 18:09:02.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-4116-10.0.0.33:22-118.194.249.186:44538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:02.438349 systemd[1]: Started sshd@32-4116-10.0.0.33:22-118.194.249.186:44538.service - OpenSSH per-connection server daemon (118.194.249.186:44538). Sep 11 18:09:03.362157 sshd[7698]: Connection closed by authenticating user root 118.194.249.186 port 44538 [preauth] Sep 11 18:09:03.361000 audit[7698]: AUDIT1109 pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:03.364119 systemd[1]: sshd@32-4116-10.0.0.33:22-118.194.249.186:44538.service: Deactivated successfully. Sep 11 18:09:03.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-4116-10.0.0.33:22-118.194.249.186:44538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:03.443675 systemd[1]: docker-a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a.scope: Deactivated successfully. Sep 11 18:09:03.457205 dockerd[2991]: time="2026-09-11T18:09:03.457156376Z" level=info msg="ignoring event" container=a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:03.457502 containerd[2527]: time="2026-09-11T18:09:03.457101614Z" level=info msg="shim disconnected" id=a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a namespace=moby Sep 11 18:09:03.457502 containerd[2527]: time="2026-09-11T18:09:03.457223183Z" level=info msg="cleaning up after shim disconnected" id=a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a namespace=moby Sep 11 18:09:03.457502 containerd[2527]: time="2026-09-11T18:09:03.457230685Z" level=info msg="cleaning up dead shim" id=a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a namespace=moby Sep 11 18:09:03.490862 systemd-networkd[2304]: veth7bf1f99: Lost carrier Sep 11 18:09:03.491164 kernel: docker0: port 1(veth7bf1f99) entered disabled state Sep 11 18:09:03.491197 kernel: vetha7697bf: renamed from eth0 Sep 11 18:09:03.514000 audit[7727]: NETFILTER_CFG table=raw:139 family=2 entries=1 op=nft_unregister_rule pid=7727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:03.514000 audit[7727]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc9e6879d0 a2=0 a3=0 items=0 ppid=2991 pid=7727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.514000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:03.525693 systemd-networkd[2304]: veth7bf1f99: Link DOWN Sep 11 18:09:03.527024 kernel: docker0: port 1(veth7bf1f99) entered disabled state Sep 11 18:09:03.524000 audit: ANOM_PROMISCUOUS dev=veth7bf1f99 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:03.530427 kernel: veth7bf1f99 (unregistering): left allmulticast mode Sep 11 18:09:03.530469 kernel: veth7bf1f99 (unregistering): left promiscuous mode Sep 11 18:09:03.530487 kernel: docker0: port 1(veth7bf1f99) entered disabled state Sep 11 18:09:03.524000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8a080 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.524000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:03.543598 systemd[1]: run-docker-netns-8f62aa4eabb7.mount: Deactivated successfully. Sep 11 18:09:03.548611 systemd[1]: var-lib-docker-rootfs-overlayfs-a6fad30826e5e908da8371bd9fb87a4aa687c77b1c6d6cf84c51186fec7e427a.mount: Deactivated successfully. Sep 11 18:09:03.559000 audit: BPF prog-id=306 op=UNLOAD Sep 11 18:09:03.559000 audit: BPF prog-id=310 op=UNLOAD Sep 11 18:09:03.595365 systemd[1]: Started sshd@33-14-10.0.0.33:22-118.194.249.186:56972.service - OpenSSH per-connection server daemon (118.194.249.186:56972). Sep 11 18:09:03.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-14-10.0.0.33:22-118.194.249.186:56972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:03.691446 systemd[1]: tmp-containerd\x2dmount1528040837.mount: Deactivated successfully. Sep 11 18:09:03.758027 containerd[2527]: time="2026-09-11T18:09:03.757583855Z" level=info msg="connecting to shim b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b" address="unix:///run/containerd/s/a79c02ba7385de071b195a63e030268a0655718d8d3db4f0d11ecabcc9d08211" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:03.776184 systemd[1]: Started docker-b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b.scope - libcontainer container b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b. Sep 11 18:09:03.783000 audit: BPF prog-id=311 op=LOAD Sep 11 18:09:03.786404 kernel: kauditd_printk_skb: 121 callbacks suppressed Sep 11 18:09:03.786438 kernel: audit: type=1334 audit(1789150143.783:1142): prog-id=311 op=LOAD Sep 11 18:09:03.785000 audit: BPF prog-id=312 op=LOAD Sep 11 18:09:03.787817 kernel: audit: type=1334 audit(1789150143.785:1143): prog-id=312 op=LOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34c0828e9fd8 a2=98 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.790669 kernel: audit: type=1300 audit(1789150143.785:1143): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34c0828e9fd8 a2=98 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.794810 kernel: audit: type=1327 audit(1789150143.785:1143): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.785000 audit: BPF prog-id=312 op=UNLOAD Sep 11 18:09:03.795890 kernel: audit: type=1334 audit(1789150143.785:1144): prog-id=312 op=UNLOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.799558 kernel: audit: type=1300 audit(1789150143.785:1144): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.803203 kernel: audit: type=1327 audit(1789150143.785:1144): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.785000 audit: BPF prog-id=313 op=LOAD Sep 11 18:09:03.804354 kernel: audit: type=1334 audit(1789150143.785:1145): prog-id=313 op=LOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34c0828ea290 a2=98 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.814378 kernel: audit: type=1300 audit(1789150143.785:1145): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34c0828ea290 a2=98 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.818058 kernel: audit: type=1327 audit(1789150143.785:1145): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.785000 audit: BPF prog-id=314 op=LOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=34c0828e9fe8 a2=98 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.785000 audit: BPF prog-id=314 op=UNLOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.785000 audit: BPF prog-id=313 op=UNLOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.785000 audit: BPF prog-id=315 op=LOAD Sep 11 18:09:03.785000 audit[7762]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34c0828ea4f0 a2=98 a3=0 items=0 ppid=7750 pid=7762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62313033316232663363663737303734643866366530333437 Sep 11 18:09:03.826287 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:03.828408 kernel: docker0: port 1(veth9d7cfc8) entered blocking state Sep 11 18:09:03.828462 kernel: docker0: port 1(veth9d7cfc8) entered disabled state Sep 11 18:09:03.829788 kernel: veth9d7cfc8: entered allmulticast mode Sep 11 18:09:03.831610 kernel: veth9d7cfc8: entered promiscuous mode Sep 11 18:09:03.824000 audit: ANOM_PROMISCUOUS dev=veth9d7cfc8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:03.824000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e62a0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.824000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:03.834000 audit[7783]: NETFILTER_CFG table=raw:140 family=2 entries=1 op=nft_register_rule pid=7783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:03.834000 audit[7783]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc5f256490 a2=0 a3=0 items=0 ppid=2991 pid=7783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:03.834000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:03.835985 systemd-networkd[2304]: veth9d7cfc8: Link UP Sep 11 18:09:03.843024 kernel: eth0: renamed from veth8e69cd5 Sep 11 18:09:03.846491 kernel: docker0: port 1(veth9d7cfc8) entered blocking state Sep 11 18:09:03.846539 kernel: docker0: port 1(veth9d7cfc8) entered forwarding state Sep 11 18:09:03.846571 systemd-networkd[2304]: veth9d7cfc8: Gained carrier Sep 11 18:09:03.846867 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:03.854953 dockerd[2991]: time="2026-09-11T18:09:03.854925591Z" level=info msg="sbJoin: gwep4 ''->'949b9b8b6c0e', gwep6 ''->''" eid=949b9b8b6c0e ep=gifted_hopper net=bridge nid=ad3b593e9776 Sep 11 18:09:04.524693 sshd[7729]: Connection closed by authenticating user root 118.194.249.186 port 56972 [preauth] Sep 11 18:09:04.524000 audit[7729]: AUDIT1109 pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:04.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-14-10.0.0.33:22-118.194.249.186:56972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:04.526418 systemd[1]: sshd@33-14-10.0.0.33:22-118.194.249.186:56972.service: Deactivated successfully. Sep 11 18:09:04.769699 systemd[1]: Started sshd@34-15-10.0.0.33:22-118.194.249.186:34940.service - OpenSSH per-connection server daemon (118.194.249.186:34940). Sep 11 18:09:04.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-15-10.0.0.33:22-118.194.249.186:34940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:04.877397 systemd[1]: docker-b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b.scope: Deactivated successfully. Sep 11 18:09:04.889143 dockerd[2991]: time="2026-09-11T18:09:04.889108514Z" level=info msg="ignoring event" container=b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:04.890024 containerd[2527]: time="2026-09-11T18:09:04.889480484Z" level=info msg="shim disconnected" id=b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b namespace=moby Sep 11 18:09:04.890024 containerd[2527]: time="2026-09-11T18:09:04.889512444Z" level=info msg="cleaning up after shim disconnected" id=b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b namespace=moby Sep 11 18:09:04.890024 containerd[2527]: time="2026-09-11T18:09:04.889520127Z" level=info msg="cleaning up dead shim" id=b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b namespace=moby Sep 11 18:09:04.912930 systemd-networkd[2304]: veth9d7cfc8: Lost carrier Sep 11 18:09:04.913550 kernel: docker0: port 1(veth9d7cfc8) entered disabled state Sep 11 18:09:04.913589 kernel: veth8e69cd5: renamed from eth0 Sep 11 18:09:04.925000 audit[7820]: NETFILTER_CFG table=raw:141 family=2 entries=1 op=nft_unregister_rule pid=7820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:04.925000 audit[7820]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc18745cd0 a2=0 a3=0 items=0 ppid=2991 pid=7820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:04.925000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:04.931427 systemd-networkd[2304]: veth9d7cfc8: Link DOWN Sep 11 18:09:04.934553 kernel: docker0: port 1(veth9d7cfc8) entered disabled state Sep 11 18:09:04.934608 kernel: veth9d7cfc8 (unregistering): left allmulticast mode Sep 11 18:09:04.936042 kernel: veth9d7cfc8 (unregistering): left promiscuous mode Sep 11 18:09:04.930000 audit: ANOM_PROMISCUOUS dev=veth9d7cfc8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:04.937635 kernel: docker0: port 1(veth9d7cfc8) entered disabled state Sep 11 18:09:04.930000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e0160 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:04.930000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:04.948539 systemd[1]: run-docker-netns-3c25a6f206ce.mount: Deactivated successfully. Sep 11 18:09:04.953270 systemd[1]: var-lib-docker-rootfs-overlayfs-b1031b2f3cf77074d8f6e034765671265d47d661da8b167e787487ee2ead7f4b.mount: Deactivated successfully. Sep 11 18:09:04.959000 audit: BPF prog-id=311 op=UNLOAD Sep 11 18:09:04.959000 audit: BPF prog-id=315 op=UNLOAD Sep 11 18:09:05.072483 systemd[1]: tmp-containerd\x2dmount1505394521.mount: Deactivated successfully. Sep 11 18:09:05.144074 containerd[2527]: time="2026-09-11T18:09:05.143130857Z" level=info msg="connecting to shim caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392" address="unix:///run/containerd/s/0e0499e9e71f93113945bb9283200c2e27738515ea76c7f812a6d53048ffa37b" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:05.162185 systemd[1]: Started docker-caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392.scope - libcontainer container caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392. Sep 11 18:09:05.170000 audit: BPF prog-id=316 op=LOAD Sep 11 18:09:05.170000 audit: BPF prog-id=317 op=LOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b223af0dfd8 a2=98 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.170000 audit: BPF prog-id=317 op=UNLOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.170000 audit: BPF prog-id=318 op=LOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b223af0e290 a2=98 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.170000 audit: BPF prog-id=319 op=LOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=b223af0dfe8 a2=98 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.170000 audit: BPF prog-id=319 op=UNLOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.170000 audit: BPF prog-id=318 op=UNLOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.170000 audit: BPF prog-id=320 op=LOAD Sep 11 18:09:05.170000 audit[7849]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b223af0e4f0 a2=98 a3=0 items=0 ppid=7838 pid=7849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63616637306266313566336334613961353637656137373231 Sep 11 18:09:05.192442 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:05.194031 kernel: docker0: port 1(veth16c6744) entered blocking state Sep 11 18:09:05.194089 kernel: docker0: port 1(veth16c6744) entered disabled state Sep 11 18:09:05.195364 kernel: veth16c6744: entered allmulticast mode Sep 11 18:09:05.195468 kernel: veth16c6744: entered promiscuous mode Sep 11 18:09:05.189000 audit: ANOM_PROMISCUOUS dev=veth16c6744 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:05.189000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120763c0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.189000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:05.198000 audit[7871]: NETFILTER_CFG table=raw:142 family=2 entries=1 op=nft_register_rule pid=7871 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:05.198000 audit[7871]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc5e703d40 a2=0 a3=0 items=0 ppid=2991 pid=7871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:05.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:05.201081 systemd-networkd[2304]: veth16c6744: Link UP Sep 11 18:09:05.207018 kernel: eth0: renamed from veth4b154c2 Sep 11 18:09:05.207267 kernel: docker0: port 1(veth16c6744) entered blocking state Sep 11 18:09:05.208505 kernel: docker0: port 1(veth16c6744) entered forwarding state Sep 11 18:09:05.208786 systemd-networkd[2304]: veth16c6744: Gained carrier Sep 11 18:09:05.209074 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:05.216213 dockerd[2991]: time="2026-09-11T18:09:05.216186061Z" level=info msg="sbJoin: gwep4 ''->'545766eb3043', gwep6 ''->''" eid=545766eb3043 ep=nifty_wescoff net=bridge nid=ad3b593e9776 Sep 11 18:09:05.720706 sshd[7794]: Connection closed by authenticating user root 118.194.249.186 port 34940 [preauth] Sep 11 18:09:05.720000 audit[7794]: AUDIT1109 pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:05.722519 systemd[1]: sshd@34-15-10.0.0.33:22-118.194.249.186:34940.service: Deactivated successfully. Sep 11 18:09:05.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-15-10.0.0.33:22-118.194.249.186:34940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:05.955148 systemd[1]: Started sshd@35-4117-10.0.0.33:22-118.194.249.186:50638.service - OpenSSH per-connection server daemon (118.194.249.186:50638). Sep 11 18:09:05.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4117-10.0.0.33:22-118.194.249.186:50638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:06.240085 systemd[1]: docker-caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392.scope: Deactivated successfully. Sep 11 18:09:06.252867 containerd[2527]: time="2026-09-11T18:09:06.252811562Z" level=info msg="shim disconnected" id=caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392 namespace=moby Sep 11 18:09:06.252867 containerd[2527]: time="2026-09-11T18:09:06.252857277Z" level=info msg="cleaning up after shim disconnected" id=caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392 namespace=moby Sep 11 18:09:06.252867 containerd[2527]: time="2026-09-11T18:09:06.252866272Z" level=info msg="cleaning up dead shim" id=caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392 namespace=moby Sep 11 18:09:06.278344 systemd-networkd[2304]: veth16c6744: Lost carrier Sep 11 18:09:06.279467 kernel: docker0: port 1(veth16c6744) entered disabled state Sep 11 18:09:06.279520 kernel: veth4b154c2: renamed from eth0 Sep 11 18:09:06.297000 audit[7909]: NETFILTER_CFG table=raw:143 family=2 entries=1 op=nft_unregister_rule pid=7909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:06.297000 audit[7909]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd73c48570 a2=0 a3=0 items=0 ppid=2991 pid=7909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.297000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:06.304734 systemd-networkd[2304]: veth16c6744: Link DOWN Sep 11 18:09:06.306023 kernel: docker0: port 1(veth16c6744) entered disabled state Sep 11 18:09:06.303000 audit: ANOM_PROMISCUOUS dev=veth16c6744 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:06.309521 kernel: veth16c6744 (unregistering): left allmulticast mode Sep 11 18:09:06.309546 kernel: veth16c6744 (unregistering): left promiscuous mode Sep 11 18:09:06.309562 kernel: docker0: port 1(veth16c6744) entered disabled state Sep 11 18:09:06.303000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca810ac7680 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.303000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:06.317066 systemd[1]: run-docker-netns-95cc9aab2146.mount: Deactivated successfully. Sep 11 18:09:06.319376 systemd[1]: var-lib-docker-rootfs-overlayfs-caf70bf15f3c4a9a567ea7721488d37bbac374bc4c40e29aae69a0f41d6bc392.mount: Deactivated successfully. Sep 11 18:09:06.334000 audit: BPF prog-id=316 op=UNLOAD Sep 11 18:09:06.334000 audit: BPF prog-id=320 op=UNLOAD Sep 11 18:09:06.467630 systemd[1]: tmp-containerd\x2dmount1290149887.mount: Deactivated successfully. Sep 11 18:09:06.556500 containerd[2527]: time="2026-09-11T18:09:06.556368824Z" level=info msg="connecting to shim fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95" address="unix:///run/containerd/s/1e27d4f710beb7a1ce036a13f1fcfe5c69a937d5afa9e059ef320744bb40383c" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:06.578182 systemd[1]: Started docker-fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95.scope - libcontainer container fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95. Sep 11 18:09:06.585000 audit: BPF prog-id=321 op=LOAD Sep 11 18:09:06.585000 audit: BPF prog-id=322 op=LOAD Sep 11 18:09:06.585000 audit[7938]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e32e74d9fd8 a2=98 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.585000 audit: BPF prog-id=322 op=UNLOAD Sep 11 18:09:06.585000 audit[7938]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.585000 audit: BPF prog-id=323 op=LOAD Sep 11 18:09:06.585000 audit[7938]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e32e74da290 a2=98 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.586000 audit: BPF prog-id=324 op=LOAD Sep 11 18:09:06.586000 audit[7938]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1e32e74d9fe8 a2=98 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.586000 audit: BPF prog-id=324 op=UNLOAD Sep 11 18:09:06.586000 audit[7938]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.586000 audit: BPF prog-id=323 op=UNLOAD Sep 11 18:09:06.586000 audit[7938]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.586000 audit: BPF prog-id=325 op=LOAD Sep 11 18:09:06.586000 audit[7938]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e32e74da4f0 a2=98 a3=0 items=0 ppid=7927 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633364646239393130623834353461646637306565633664 Sep 11 18:09:06.610024 kernel: docker0: port 1(vethc403d42) entered blocking state Sep 11 18:09:06.610089 kernel: docker0: port 1(vethc403d42) entered disabled state Sep 11 18:09:06.610111 kernel: vethc403d42: entered allmulticast mode Sep 11 18:09:06.612132 kernel: vethc403d42: entered promiscuous mode Sep 11 18:09:06.605000 audit: ANOM_PROMISCUOUS dev=vethc403d42 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:06.612919 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:06.605000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155ef00 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.605000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:06.614000 audit[7960]: NETFILTER_CFG table=raw:144 family=2 entries=1 op=nft_register_rule pid=7960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:06.614000 audit[7960]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd5aa73110 a2=0 a3=0 items=0 ppid=2991 pid=7960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:06.614000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:06.616187 systemd-networkd[2304]: vethc403d42: Link UP Sep 11 18:09:06.624021 kernel: eth0: renamed from vethde2fbf9 Sep 11 18:09:06.626486 kernel: docker0: port 1(vethc403d42) entered blocking state Sep 11 18:09:06.626540 kernel: docker0: port 1(vethc403d42) entered forwarding state Sep 11 18:09:06.626538 systemd-networkd[2304]: vethc403d42: Gained carrier Sep 11 18:09:06.626943 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:06.635100 dockerd[2991]: time="2026-09-11T18:09:06.635071526Z" level=info msg="sbJoin: gwep4 ''->'d8cd9a8ce26c', gwep6 ''->''" eid=d8cd9a8ce26c ep=quizzical_boyd net=bridge nid=ad3b593e9776 Sep 11 18:09:06.882449 sshd[7883]: Connection closed by authenticating user root 118.194.249.186 port 50638 [preauth] Sep 11 18:09:06.881000 audit[7883]: AUDIT1109 pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:06.884030 systemd[1]: sshd@35-4117-10.0.0.33:22-118.194.249.186:50638.service: Deactivated successfully. Sep 11 18:09:06.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4117-10.0.0.33:22-118.194.249.186:50638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:07.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-4118-10.0.0.33:22-118.194.249.186:34388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:07.123404 systemd[1]: Started sshd@36-4118-10.0.0.33:22-118.194.249.186:34388.service - OpenSSH per-connection server daemon (118.194.249.186:34388). Sep 11 18:09:07.657321 systemd[1]: docker-fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95.scope: Deactivated successfully. Sep 11 18:09:07.671169 containerd[2527]: time="2026-09-11T18:09:07.671136441Z" level=info msg="shim disconnected" id=fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95 namespace=moby Sep 11 18:09:07.672021 dockerd[2991]: time="2026-09-11T18:09:07.671477881Z" level=info msg="ignoring event" container=fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:07.672305 containerd[2527]: time="2026-09-11T18:09:07.671534365Z" level=info msg="cleaning up after shim disconnected" id=fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95 namespace=moby Sep 11 18:09:07.672305 containerd[2527]: time="2026-09-11T18:09:07.671554439Z" level=info msg="cleaning up dead shim" id=fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95 namespace=moby Sep 11 18:09:07.701683 systemd-networkd[2304]: vethc403d42: Lost carrier Sep 11 18:09:07.702647 kernel: docker0: port 1(vethc403d42) entered disabled state Sep 11 18:09:07.702678 kernel: vethde2fbf9: renamed from eth0 Sep 11 18:09:07.714000 audit[7996]: NETFILTER_CFG table=raw:145 family=2 entries=1 op=nft_unregister_rule pid=7996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:07.714000 audit[7996]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffeb361cf90 a2=0 a3=0 items=0 ppid=2991 pid=7996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.714000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:07.724370 systemd-networkd[2304]: vethc403d42: Link DOWN Sep 11 18:09:07.726296 kernel: docker0: port 1(vethc403d42) entered disabled state Sep 11 18:09:07.728725 kernel: vethc403d42 (unregistering): left allmulticast mode Sep 11 18:09:07.728757 kernel: vethc403d42 (unregistering): left promiscuous mode Sep 11 18:09:07.723000 audit: ANOM_PROMISCUOUS dev=vethc403d42 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:07.730392 kernel: docker0: port 1(vethc403d42) entered disabled state Sep 11 18:09:07.723000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbae20 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.723000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:07.741344 systemd[1]: run-docker-netns-e43f0f8d708c.mount: Deactivated successfully. Sep 11 18:09:07.744085 systemd[1]: var-lib-docker-rootfs-overlayfs-fc3ddb9910b8454adf70eec6dba97f0e08f0ff42e111213fa7c930ef2dd31c95.mount: Deactivated successfully. Sep 11 18:09:07.753000 audit: BPF prog-id=321 op=UNLOAD Sep 11 18:09:07.753000 audit: BPF prog-id=325 op=UNLOAD Sep 11 18:09:07.874460 systemd[1]: tmp-containerd\x2dmount1330162763.mount: Deactivated successfully. Sep 11 18:09:07.957241 containerd[2527]: time="2026-09-11T18:09:07.956900436Z" level=info msg="connecting to shim 4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43" address="unix:///run/containerd/s/4592177052b51e37f1d04398bee3a00e8c384d11ff4d88ba9b244cb736cfba3e" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:07.973192 systemd[1]: Started docker-4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43.scope - libcontainer container 4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43. Sep 11 18:09:07.980000 audit: BPF prog-id=326 op=LOAD Sep 11 18:09:07.980000 audit: BPF prog-id=327 op=LOAD Sep 11 18:09:07.980000 audit[8024]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34ce1eab5fd8 a2=98 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:07.980000 audit: BPF prog-id=327 op=UNLOAD Sep 11 18:09:07.980000 audit[8024]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:07.981000 audit: BPF prog-id=328 op=LOAD Sep 11 18:09:07.981000 audit[8024]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34ce1eab6290 a2=98 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:07.981000 audit: BPF prog-id=329 op=LOAD Sep 11 18:09:07.981000 audit[8024]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=34ce1eab5fe8 a2=98 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:07.981000 audit: BPF prog-id=329 op=UNLOAD Sep 11 18:09:07.981000 audit[8024]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:07.981000 audit: BPF prog-id=328 op=UNLOAD Sep 11 18:09:07.981000 audit[8024]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:07.981000 audit: BPF prog-id=330 op=LOAD Sep 11 18:09:07.981000 audit[8024]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34ce1eab64f0 a2=98 a3=0 items=0 ppid=8012 pid=8024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:07.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34636132623830333666383964376132653136376233393234 Sep 11 18:09:08.005127 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:08.006984 kernel: docker0: port 1(vethd74d6ff) entered blocking state Sep 11 18:09:08.007045 kernel: docker0: port 1(vethd74d6ff) entered disabled state Sep 11 18:09:08.003000 audit: ANOM_PROMISCUOUS dev=vethd74d6ff prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:08.008610 kernel: vethd74d6ff: entered allmulticast mode Sep 11 18:09:08.008643 kernel: vethd74d6ff: entered promiscuous mode Sep 11 18:09:08.003000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f10690 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:08.003000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:08.009000 audit[8047]: NETFILTER_CFG table=raw:146 family=2 entries=1 op=nft_register_rule pid=8047 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:08.009000 audit[8047]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffaaa283e0 a2=0 a3=0 items=0 ppid=2991 pid=8047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:08.009000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:08.011501 systemd-networkd[2304]: vethd74d6ff: Link UP Sep 11 18:09:08.019018 kernel: eth0: renamed from veth83ee21f Sep 11 18:09:08.019074 kernel: docker0: port 1(vethd74d6ff) entered blocking state Sep 11 18:09:08.021123 kernel: docker0: port 1(vethd74d6ff) entered forwarding state Sep 11 18:09:08.021225 systemd-networkd[2304]: vethd74d6ff: Gained carrier Sep 11 18:09:08.021726 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:08.029577 dockerd[2991]: time="2026-09-11T18:09:08.029550655Z" level=info msg="sbJoin: gwep4 ''->'5a4ac5db2b67', gwep6 ''->''" eid=5a4ac5db2b67 ep=priceless_booth net=bridge nid=ad3b593e9776 Sep 11 18:09:08.048282 sshd[7971]: Connection closed by authenticating user root 118.194.249.186 port 34388 [preauth] Sep 11 18:09:08.047000 audit[7971]: AUDIT1109 pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:08.049795 systemd[1]: sshd@36-4118-10.0.0.33:22-118.194.249.186:34388.service: Deactivated successfully. Sep 11 18:09:08.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-4118-10.0.0.33:22-118.194.249.186:34388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:08.293152 systemd[1]: Started sshd@37-16-10.0.0.33:22-118.194.249.186:49316.service - OpenSSH per-connection server daemon (118.194.249.186:49316). Sep 11 18:09:08.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-16-10.0.0.33:22-118.194.249.186:49316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:09.053603 systemd[1]: docker-4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43.scope: Deactivated successfully. Sep 11 18:09:09.067981 dockerd[2991]: time="2026-09-11T18:09:09.067938336Z" level=info msg="ignoring event" container=4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:09.068467 containerd[2527]: time="2026-09-11T18:09:09.068197962Z" level=info msg="shim disconnected" id=4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43 namespace=moby Sep 11 18:09:09.068839 containerd[2527]: time="2026-09-11T18:09:09.068687589Z" level=info msg="cleaning up after shim disconnected" id=4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43 namespace=moby Sep 11 18:09:09.068839 containerd[2527]: time="2026-09-11T18:09:09.068705862Z" level=info msg="cleaning up dead shim" id=4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43 namespace=moby Sep 11 18:09:09.096641 kernel: docker0: port 1(vethd74d6ff) entered disabled state Sep 11 18:09:09.096172 systemd-networkd[2304]: vethd74d6ff: Lost carrier Sep 11 18:09:09.096944 kernel: veth83ee21f: renamed from eth0 Sep 11 18:09:09.123000 audit[8082]: NETFILTER_CFG table=raw:147 family=2 entries=1 op=nft_unregister_rule pid=8082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:09.125070 kernel: kauditd_printk_skb: 138 callbacks suppressed Sep 11 18:09:09.125369 kernel: audit: type=1325 audit(1789150149.123:1206): table=raw:147 family=2 entries=1 op=nft_unregister_rule pid=8082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:09.123000 audit[8082]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff1f7febd0 a2=0 a3=0 items=0 ppid=2991 pid=8082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.129985 kernel: audit: type=1300 audit(1789150149.123:1206): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff1f7febd0 a2=0 a3=0 items=0 ppid=2991 pid=8082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:09.132412 kernel: audit: type=1327 audit(1789150149.123:1206): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:09.133022 kernel: docker0: port 1(vethd74d6ff) entered disabled state Sep 11 18:09:09.133860 systemd-networkd[2304]: vethd74d6ff: Link DOWN Sep 11 18:09:09.135259 kernel: vethd74d6ff (unregistering): left allmulticast mode Sep 11 18:09:09.136435 kernel: vethd74d6ff (unregistering): left promiscuous mode Sep 11 18:09:09.131000 audit: ANOM_PROMISCUOUS dev=vethd74d6ff prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:09.138540 kernel: docker0: port 1(vethd74d6ff) entered disabled state Sep 11 18:09:09.138563 kernel: audit: type=1700 audit(1789150149.131:1207): dev=vethd74d6ff prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:09.131000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbbf00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.153098 systemd[1]: run-docker-netns-3375f106c2eb.mount: Deactivated successfully. Sep 11 18:09:09.131000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:09.157927 kernel: audit: type=1300 audit(1789150149.131:1207): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbbf00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.157957 kernel: audit: type=1327 audit(1789150149.131:1207): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:09.160690 systemd[1]: var-lib-docker-rootfs-overlayfs-4ca2b8036f89d7a2e167b3924bbab51877a34c93223995d7bb04c389b1e24c43.mount: Deactivated successfully. Sep 11 18:09:09.167000 audit: BPF prog-id=326 op=UNLOAD Sep 11 18:09:09.167000 audit: BPF prog-id=330 op=UNLOAD Sep 11 18:09:09.170562 kernel: audit: type=1334 audit(1789150149.167:1208): prog-id=326 op=UNLOAD Sep 11 18:09:09.170585 kernel: audit: type=1334 audit(1789150149.167:1209): prog-id=330 op=UNLOAD Sep 11 18:09:09.242055 sshd[8057]: Connection closed by authenticating user root 118.194.249.186 port 49316 [preauth] Sep 11 18:09:09.241000 audit[8057]: AUDIT1109 pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:09.248325 kernel: audit: type=1109 audit(1789150149.241:1210): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:09.248877 systemd[1]: sshd@37-16-10.0.0.33:22-118.194.249.186:49316.service: Deactivated successfully. Sep 11 18:09:09.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-16-10.0.0.33:22-118.194.249.186:49316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:09.256016 kernel: audit: type=1131 audit(1789150149.248:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-16-10.0.0.33:22-118.194.249.186:49316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:09.354474 containerd[2527]: time="2026-09-11T18:09:09.354392694Z" level=info msg="connecting to shim 870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331" address="unix:///run/containerd/s/7ed6b39099e0436c200efaabea14fe90553ede536674a07151c67e34aaef5ee3" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:09.376161 systemd[1]: Started docker-870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331.scope - libcontainer container 870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331. Sep 11 18:09:09.383000 audit: BPF prog-id=331 op=LOAD Sep 11 18:09:09.384000 audit: BPF prog-id=332 op=LOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=6306a079fd8 a2=98 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.384000 audit: BPF prog-id=332 op=UNLOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.384000 audit: BPF prog-id=333 op=LOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=6306a07a290 a2=98 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.384000 audit: BPF prog-id=334 op=LOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=6306a079fe8 a2=98 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.384000 audit: BPF prog-id=334 op=UNLOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.384000 audit: BPF prog-id=333 op=UNLOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.384000 audit: BPF prog-id=335 op=LOAD Sep 11 18:09:09.384000 audit[8112]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=6306a07a4f0 a2=98 a3=0 items=0 ppid=8100 pid=8112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38373062363631646638333666306638333765636537363930 Sep 11 18:09:09.410843 kernel: docker0: port 1(veth4648031) entered blocking state Sep 11 18:09:09.410714 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:09.410984 kernel: docker0: port 1(veth4648031) entered disabled state Sep 11 18:09:09.411246 kernel: veth4648031: entered allmulticast mode Sep 11 18:09:09.412516 kernel: veth4648031: entered promiscuous mode Sep 11 18:09:09.407000 audit: ANOM_PROMISCUOUS dev=veth4648031 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:09.407000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a12f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.407000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:09.414000 audit[8133]: NETFILTER_CFG table=raw:148 family=2 entries=1 op=nft_register_rule pid=8133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:09.414000 audit[8133]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc1ab123c0 a2=0 a3=0 items=0 ppid=2991 pid=8133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:09.414000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:09.418410 systemd-networkd[2304]: veth4648031: Link UP Sep 11 18:09:09.429031 kernel: eth0: renamed from vethc7fef1d Sep 11 18:09:09.431185 kernel: docker0: port 1(veth4648031) entered blocking state Sep 11 18:09:09.431241 kernel: docker0: port 1(veth4648031) entered forwarding state Sep 11 18:09:09.431713 systemd-networkd[2304]: veth4648031: Gained carrier Sep 11 18:09:09.432347 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:09.447773 dockerd[2991]: time="2026-09-11T18:09:09.447742161Z" level=info msg="sbJoin: gwep4 ''->'4736c1ee729a', gwep6 ''->''" eid=4736c1ee729a ep=vigorous_wescoff net=bridge nid=ad3b593e9776 Sep 11 18:09:09.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-17-10.0.0.33:22-118.194.249.186:36484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:09.487460 systemd[1]: Started sshd@38-17-10.0.0.33:22-118.194.249.186:36484.service - OpenSSH per-connection server daemon (118.194.249.186:36484). Sep 11 18:09:10.437186 sshd[8142]: Connection closed by authenticating user root 118.194.249.186 port 36484 [preauth] Sep 11 18:09:10.436000 audit[8142]: AUDIT1109 pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:10.438930 systemd[1]: sshd@38-17-10.0.0.33:22-118.194.249.186:36484.service: Deactivated successfully. Sep 11 18:09:10.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-17-10.0.0.33:22-118.194.249.186:36484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:10.478104 systemd[1]: docker-870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331.scope: Deactivated successfully. Sep 11 18:09:10.490717 containerd[2527]: time="2026-09-11T18:09:10.490682760Z" level=info msg="shim disconnected" id=870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331 namespace=moby Sep 11 18:09:10.490717 containerd[2527]: time="2026-09-11T18:09:10.490715473Z" level=info msg="cleaning up after shim disconnected" id=870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331 namespace=moby Sep 11 18:09:10.491027 containerd[2527]: time="2026-09-11T18:09:10.490722146Z" level=info msg="cleaning up dead shim" id=870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331 namespace=moby Sep 11 18:09:10.491053 dockerd[2991]: time="2026-09-11T18:09:10.490624792Z" level=info msg="ignoring event" container=870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:10.518813 systemd-networkd[2304]: veth4648031: Lost carrier Sep 11 18:09:10.519668 kernel: docker0: port 1(veth4648031) entered disabled state Sep 11 18:09:10.519712 kernel: vethc7fef1d: renamed from eth0 Sep 11 18:09:10.536000 audit[8170]: NETFILTER_CFG table=raw:149 family=2 entries=1 op=nft_unregister_rule pid=8170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:10.536000 audit[8170]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd9b7b6380 a2=0 a3=0 items=0 ppid=2991 pid=8170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.536000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:10.539422 systemd-networkd[2304]: veth4648031: Link DOWN Sep 11 18:09:10.541019 kernel: docker0: port 1(veth4648031) entered disabled state Sep 11 18:09:10.543239 kernel: veth4648031 (unregistering): left allmulticast mode Sep 11 18:09:10.543304 kernel: veth4648031 (unregistering): left promiscuous mode Sep 11 18:09:10.538000 audit: ANOM_PROMISCUOUS dev=veth4648031 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:10.544343 kernel: docker0: port 1(veth4648031) entered disabled state Sep 11 18:09:10.538000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffeb00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.538000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:10.556093 systemd[1]: run-docker-netns-60d58f374e1a.mount: Deactivated successfully. Sep 11 18:09:10.559085 systemd[1]: var-lib-docker-rootfs-overlayfs-870b661df836f0f837ece76908f7c41724ec159dfb9b507222545c538e601331.mount: Deactivated successfully. Sep 11 18:09:10.567000 audit: BPF prog-id=331 op=UNLOAD Sep 11 18:09:10.567000 audit: BPF prog-id=335 op=UNLOAD Sep 11 18:09:10.668961 systemd[1]: Started sshd@39-4119-10.0.0.33:22-118.194.249.186:52480.service - OpenSSH per-connection server daemon (118.194.249.186:52480). Sep 11 18:09:10.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-4119-10.0.0.33:22-118.194.249.186:52480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:10.691639 systemd[1]: tmp-containerd\x2dmount1758518448.mount: Deactivated successfully. Sep 11 18:09:10.769148 containerd[2527]: time="2026-09-11T18:09:10.769117818Z" level=info msg="connecting to shim 6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d" address="unix:///run/containerd/s/36cae8cede6eb47440262729124d7f00de8db81ecfc239b2a37cf2238ef4ab39" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:10.789190 systemd[1]: Started docker-6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d.scope - libcontainer container 6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d. Sep 11 18:09:10.797000 audit: BPF prog-id=336 op=LOAD Sep 11 18:09:10.798000 audit: BPF prog-id=337 op=LOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=ad23e9b1fd8 a2=98 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.798000 audit: BPF prog-id=337 op=UNLOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.798000 audit: BPF prog-id=338 op=LOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=ad23e9b2290 a2=98 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.798000 audit: BPF prog-id=339 op=LOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=ad23e9b1fe8 a2=98 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.798000 audit: BPF prog-id=339 op=UNLOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.798000 audit: BPF prog-id=338 op=UNLOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.798000 audit: BPF prog-id=340 op=LOAD Sep 11 18:09:10.798000 audit[8204]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=ad23e9b24f0 a2=98 a3=0 items=0 ppid=8192 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36643938306166323965303766393638626430643632386635 Sep 11 18:09:10.821931 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:10.822805 kernel: docker0: port 1(veth472de35) entered blocking state Sep 11 18:09:10.822856 kernel: docker0: port 1(veth472de35) entered disabled state Sep 11 18:09:10.824068 kernel: veth472de35: entered allmulticast mode Sep 11 18:09:10.825069 kernel: veth472de35: entered promiscuous mode Sep 11 18:09:10.818000 audit: ANOM_PROMISCUOUS dev=veth472de35 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:10.818000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c885a0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.818000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:10.826000 audit[8226]: NETFILTER_CFG table=raw:150 family=2 entries=1 op=nft_register_rule pid=8226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:10.826000 audit[8226]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff4e5e5a80 a2=0 a3=0 items=0 ppid=2991 pid=8226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:10.826000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:10.828116 systemd-networkd[2304]: veth472de35: Link UP Sep 11 18:09:10.840214 kernel: eth0: renamed from veth4f74d45 Sep 11 18:09:10.840267 kernel: docker0: port 1(veth472de35) entered blocking state Sep 11 18:09:10.840259 systemd-networkd[2304]: veth472de35: Gained carrier Sep 11 18:09:10.840341 kernel: docker0: port 1(veth472de35) entered forwarding state Sep 11 18:09:10.840725 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:10.848050 dockerd[2991]: time="2026-09-11T18:09:10.848020633Z" level=info msg="sbJoin: gwep4 ''->'a716c9373410', gwep6 ''->''" eid=a716c9373410 ep=compassionate_brattain net=bridge nid=ad3b593e9776 Sep 11 18:09:11.609864 sshd[8179]: Connection closed by authenticating user root 118.194.249.186 port 52480 [preauth] Sep 11 18:09:11.609000 audit[8179]: AUDIT1109 pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:11.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-4119-10.0.0.33:22-118.194.249.186:52480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:11.611395 systemd[1]: sshd@39-4119-10.0.0.33:22-118.194.249.186:52480.service: Deactivated successfully. Sep 11 18:09:11.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-18-10.0.0.33:22-118.194.249.186:35170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:11.841808 systemd[1]: Started sshd@40-18-10.0.0.33:22-118.194.249.186:35170.service - OpenSSH per-connection server daemon (118.194.249.186:35170). Sep 11 18:09:11.870091 systemd[1]: docker-6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d.scope: Deactivated successfully. Sep 11 18:09:11.883107 dockerd[2991]: time="2026-09-11T18:09:11.883068309Z" level=info msg="ignoring event" container=6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:11.883421 containerd[2527]: time="2026-09-11T18:09:11.883125137Z" level=info msg="shim disconnected" id=6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d namespace=moby Sep 11 18:09:11.883421 containerd[2527]: time="2026-09-11T18:09:11.883153147Z" level=info msg="cleaning up after shim disconnected" id=6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d namespace=moby Sep 11 18:09:11.883421 containerd[2527]: time="2026-09-11T18:09:11.883161685Z" level=info msg="cleaning up dead shim" id=6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d namespace=moby Sep 11 18:09:11.906624 kernel: docker0: port 1(veth472de35) entered disabled state Sep 11 18:09:11.906701 kernel: veth4f74d45: renamed from eth0 Sep 11 18:09:11.906746 systemd-networkd[2304]: veth472de35: Lost carrier Sep 11 18:09:11.923000 audit[8262]: NETFILTER_CFG table=raw:151 family=2 entries=1 op=nft_unregister_rule pid=8262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:11.923000 audit[8262]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd4df09610 a2=0 a3=0 items=0 ppid=2991 pid=8262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:11.923000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:11.931668 systemd-networkd[2304]: veth472de35: Link DOWN Sep 11 18:09:11.933022 kernel: docker0: port 1(veth472de35) entered disabled state Sep 11 18:09:11.935320 kernel: veth472de35 (unregistering): left allmulticast mode Sep 11 18:09:11.935367 kernel: veth472de35 (unregistering): left promiscuous mode Sep 11 18:09:11.930000 audit: ANOM_PROMISCUOUS dev=veth472de35 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:11.936727 kernel: docker0: port 1(veth472de35) entered disabled state Sep 11 18:09:11.930000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e0280 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:11.930000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:11.944318 systemd[1]: run-docker-netns-b2a5cb246b5f.mount: Deactivated successfully. Sep 11 18:09:11.949362 systemd[1]: var-lib-docker-rootfs-overlayfs-6d980af29e07f968bd0d628f52f0e93b191ac97b56b17974ae5ca7e16b20107d.mount: Deactivated successfully. Sep 11 18:09:11.960000 audit: BPF prog-id=336 op=UNLOAD Sep 11 18:09:11.960000 audit: BPF prog-id=340 op=UNLOAD Sep 11 18:09:12.075954 systemd[1]: tmp-containerd\x2dmount3890720703.mount: Deactivated successfully. Sep 11 18:09:12.168808 containerd[2527]: time="2026-09-11T18:09:12.168420877Z" level=info msg="connecting to shim 8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f" address="unix:///run/containerd/s/8e7e76bbc7005e8507fc917b5669aa1dc98e370788ae9902fdedb99295e465cd" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:12.186173 systemd[1]: Started docker-8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f.scope - libcontainer container 8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f. Sep 11 18:09:12.193000 audit: BPF prog-id=341 op=LOAD Sep 11 18:09:12.194000 audit: BPF prog-id=342 op=LOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=182991da1fd8 a2=98 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.194000 audit: BPF prog-id=342 op=UNLOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.194000 audit: BPF prog-id=343 op=LOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=182991da2290 a2=98 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.194000 audit: BPF prog-id=344 op=LOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=182991da1fe8 a2=98 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.194000 audit: BPF prog-id=344 op=UNLOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.194000 audit: BPF prog-id=343 op=UNLOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.194000 audit: BPF prog-id=345 op=LOAD Sep 11 18:09:12.194000 audit[8291]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=182991da24f0 a2=98 a3=0 items=0 ppid=8279 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38313837623736333233656335613838636437393965653265 Sep 11 18:09:12.216273 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:12.218314 kernel: docker0: port 1(veth02d75e6) entered blocking state Sep 11 18:09:12.218337 kernel: docker0: port 1(veth02d75e6) entered disabled state Sep 11 18:09:12.219186 kernel: veth02d75e6: entered allmulticast mode Sep 11 18:09:12.215000 audit: ANOM_PROMISCUOUS dev=veth02d75e6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:12.220124 kernel: veth02d75e6: entered promiscuous mode Sep 11 18:09:12.215000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c884e0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.215000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:12.221000 audit[8311]: NETFILTER_CFG table=raw:152 family=2 entries=1 op=nft_register_rule pid=8311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:12.221000 audit[8311]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdc4d7c4a0 a2=0 a3=0 items=0 ppid=2991 pid=8311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:12.221000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:12.222973 systemd-networkd[2304]: veth02d75e6: Link UP Sep 11 18:09:12.234039 kernel: eth0: renamed from vethbabf0c7 Sep 11 18:09:12.236405 kernel: docker0: port 1(veth02d75e6) entered blocking state Sep 11 18:09:12.236466 kernel: docker0: port 1(veth02d75e6) entered forwarding state Sep 11 18:09:12.236574 systemd-networkd[2304]: veth02d75e6: Gained carrier Sep 11 18:09:12.236804 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:12.245249 dockerd[2991]: time="2026-09-11T18:09:12.245221563Z" level=info msg="sbJoin: gwep4 ''->'b8905b70d8ca', gwep6 ''->''" eid=b8905b70d8ca ep=reverent_feistel net=bridge nid=ad3b593e9776 Sep 11 18:09:12.762133 sshd[8237]: Connection closed by authenticating user root 118.194.249.186 port 35170 [preauth] Sep 11 18:09:12.761000 audit[8237]: AUDIT1109 pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:12.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-18-10.0.0.33:22-118.194.249.186:35170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:12.763894 systemd[1]: sshd@40-18-10.0.0.33:22-118.194.249.186:35170.service: Deactivated successfully. Sep 11 18:09:13.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-4120-10.0.0.33:22-118.194.249.186:48088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:13.010729 systemd[1]: Started sshd@41-4120-10.0.0.33:22-118.194.249.186:48088.service - OpenSSH per-connection server daemon (118.194.249.186:48088). Sep 11 18:09:13.267963 systemd[1]: docker-8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f.scope: Deactivated successfully. Sep 11 18:09:13.280701 dockerd[2991]: time="2026-09-11T18:09:13.280628929Z" level=info msg="ignoring event" container=8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:13.281024 containerd[2527]: time="2026-09-11T18:09:13.280829712Z" level=info msg="shim disconnected" id=8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f namespace=moby Sep 11 18:09:13.281024 containerd[2527]: time="2026-09-11T18:09:13.280885180Z" level=info msg="cleaning up after shim disconnected" id=8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f namespace=moby Sep 11 18:09:13.281024 containerd[2527]: time="2026-09-11T18:09:13.280892989Z" level=info msg="cleaning up dead shim" id=8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f namespace=moby Sep 11 18:09:13.305561 systemd-networkd[2304]: veth02d75e6: Lost carrier Sep 11 18:09:13.306023 kernel: docker0: port 1(veth02d75e6) entered disabled state Sep 11 18:09:13.306061 kernel: vethbabf0c7: renamed from eth0 Sep 11 18:09:13.324000 audit[8347]: NETFILTER_CFG table=raw:153 family=2 entries=1 op=nft_unregister_rule pid=8347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:13.324000 audit[8347]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff8dbca6c0 a2=0 a3=0 items=0 ppid=2991 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.324000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:13.328667 systemd-networkd[2304]: veth02d75e6: Link DOWN Sep 11 18:09:13.330022 kernel: docker0: port 1(veth02d75e6) entered disabled state Sep 11 18:09:13.333119 kernel: veth02d75e6 (unregistering): left allmulticast mode Sep 11 18:09:13.333173 kernel: veth02d75e6 (unregistering): left promiscuous mode Sep 11 18:09:13.333193 kernel: docker0: port 1(veth02d75e6) entered disabled state Sep 11 18:09:13.327000 audit: ANOM_PROMISCUOUS dev=veth02d75e6 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:13.327000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e1200 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.327000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:13.346440 systemd[1]: run-docker-netns-0b1c19471b54.mount: Deactivated successfully. Sep 11 18:09:13.350613 systemd[1]: var-lib-docker-rootfs-overlayfs-8187b76323ec5a88cd799ee2eb2679666d5e5f18bd668eb73ced814467cecb5f.mount: Deactivated successfully. Sep 11 18:09:13.356000 audit: BPF prog-id=341 op=UNLOAD Sep 11 18:09:13.356000 audit: BPF prog-id=345 op=UNLOAD Sep 11 18:09:13.486627 systemd[1]: tmp-containerd\x2dmount4169765878.mount: Deactivated successfully. Sep 11 18:09:13.562221 containerd[2527]: time="2026-09-11T18:09:13.561770237Z" level=info msg="connecting to shim 29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad" address="unix:///run/containerd/s/b771a3ad1d1f16bd1b74fa0c8ff528aecd7e66f274fdc6f4d54e33e75fbee398" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:13.585153 systemd[1]: Started docker-29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad.scope - libcontainer container 29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad. Sep 11 18:09:13.592000 audit: BPF prog-id=346 op=LOAD Sep 11 18:09:13.593000 audit: BPF prog-id=347 op=LOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=115474f4dfd8 a2=98 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.593000 audit: BPF prog-id=347 op=UNLOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.593000 audit: BPF prog-id=348 op=LOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=115474f4e290 a2=98 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.593000 audit: BPF prog-id=349 op=LOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=115474f4dfe8 a2=98 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.593000 audit: BPF prog-id=349 op=UNLOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.593000 audit: BPF prog-id=348 op=UNLOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.593000 audit: BPF prog-id=350 op=LOAD Sep 11 18:09:13.593000 audit[8376]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=115474f4e4f0 a2=98 a3=0 items=0 ppid=8365 pid=8376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32396463626438346334396431363735613663316364626531 Sep 11 18:09:13.619297 kernel: docker0: port 1(vethe93a1e9) entered blocking state Sep 11 18:09:13.619218 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:13.619455 kernel: docker0: port 1(vethe93a1e9) entered disabled state Sep 11 18:09:13.614000 audit: ANOM_PROMISCUOUS dev=vethe93a1e9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:13.621906 kernel: vethe93a1e9: entered allmulticast mode Sep 11 18:09:13.621929 kernel: vethe93a1e9: entered promiscuous mode Sep 11 18:09:13.614000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812077f50 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.614000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:13.623000 audit[8398]: NETFILTER_CFG table=raw:154 family=2 entries=1 op=nft_register_rule pid=8398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:13.623000 audit[8398]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff74a3d310 a2=0 a3=0 items=0 ppid=2991 pid=8398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:13.623000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:13.625099 systemd-networkd[2304]: vethe93a1e9: Link UP Sep 11 18:09:13.638027 kernel: eth0: renamed from veth65709e7 Sep 11 18:09:13.638133 kernel: docker0: port 1(vethe93a1e9) entered blocking state Sep 11 18:09:13.639713 kernel: docker0: port 1(vethe93a1e9) entered forwarding state Sep 11 18:09:13.640050 systemd-networkd[2304]: vethe93a1e9: Gained carrier Sep 11 18:09:13.640532 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:13.647444 dockerd[2991]: time="2026-09-11T18:09:13.647417506Z" level=info msg="sbJoin: gwep4 ''->'90fb920357d5', gwep6 ''->''" eid=90fb920357d5 ep=trusting_taussig net=bridge nid=ad3b593e9776 Sep 11 18:09:13.954033 sshd[8322]: Connection closed by authenticating user root 118.194.249.186 port 48088 [preauth] Sep 11 18:09:13.953000 audit[8322]: AUDIT1109 pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:13.955572 systemd[1]: sshd@41-4120-10.0.0.33:22-118.194.249.186:48088.service: Deactivated successfully. Sep 11 18:09:13.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-4120-10.0.0.33:22-118.194.249.186:48088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:14.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4121-10.0.0.33:22-118.194.249.186:33244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:14.197233 systemd[1]: Started sshd@42-4121-10.0.0.33:22-118.194.249.186:33244.service - OpenSSH per-connection server daemon (118.194.249.186:33244). Sep 11 18:09:14.200065 kernel: kauditd_printk_skb: 148 callbacks suppressed Sep 11 18:09:14.200384 kernel: audit: type=1130 audit(1789150154.196:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4121-10.0.0.33:22-118.194.249.186:33244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:14.683701 systemd[1]: docker-29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad.scope: Deactivated successfully. Sep 11 18:09:14.697554 containerd[2527]: time="2026-09-11T18:09:14.697504268Z" level=info msg="shim disconnected" id=29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad namespace=moby Sep 11 18:09:14.697899 dockerd[2991]: time="2026-09-11T18:09:14.697550770Z" level=info msg="ignoring event" container=29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:14.698215 containerd[2527]: time="2026-09-11T18:09:14.698185127Z" level=info msg="cleaning up after shim disconnected" id=29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad namespace=moby Sep 11 18:09:14.698215 containerd[2527]: time="2026-09-11T18:09:14.698209592Z" level=info msg="cleaning up dead shim" id=29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad namespace=moby Sep 11 18:09:14.723479 systemd-networkd[2304]: vethe93a1e9: Lost carrier Sep 11 18:09:14.724030 kernel: docker0: port 1(vethe93a1e9) entered disabled state Sep 11 18:09:14.724064 kernel: veth65709e7: renamed from eth0 Sep 11 18:09:14.741000 audit[8434]: NETFILTER_CFG table=raw:155 family=2 entries=1 op=nft_unregister_rule pid=8434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:14.741000 audit[8434]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffde3beb800 a2=0 a3=0 items=0 ppid=2991 pid=8434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:14.748262 kernel: audit: type=1325 audit(1789150154.741:1277): table=raw:155 family=2 entries=1 op=nft_unregister_rule pid=8434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:14.748325 kernel: audit: type=1300 audit(1789150154.741:1277): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffde3beb800 a2=0 a3=0 items=0 ppid=2991 pid=8434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:14.741000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:14.750976 kernel: audit: type=1327 audit(1789150154.741:1277): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:14.754367 systemd-networkd[2304]: vethe93a1e9: Link DOWN Sep 11 18:09:14.755020 kernel: docker0: port 1(vethe93a1e9) entered disabled state Sep 11 18:09:14.757594 kernel: vethe93a1e9 (unregistering): left allmulticast mode Sep 11 18:09:14.753000 audit: ANOM_PROMISCUOUS dev=vethe93a1e9 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:14.759709 kernel: vethe93a1e9 (unregistering): left promiscuous mode Sep 11 18:09:14.759733 kernel: docker0: port 1(vethe93a1e9) entered disabled state Sep 11 18:09:14.759750 kernel: audit: type=1700 audit(1789150154.753:1278): dev=vethe93a1e9 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:14.753000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067be0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:14.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:14.772347 kernel: audit: type=1300 audit(1789150154.753:1278): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067be0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:14.772399 kernel: audit: type=1327 audit(1789150154.753:1278): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:14.776051 systemd[1]: run-docker-netns-ba73350d0aa7.mount: Deactivated successfully. Sep 11 18:09:14.778703 systemd[1]: var-lib-docker-rootfs-overlayfs-29dcbd84c49d1675a6c1cdbe10edc2edb225082acbff13c85e11ec43f86c39ad.mount: Deactivated successfully. Sep 11 18:09:14.784000 audit: BPF prog-id=346 op=UNLOAD Sep 11 18:09:14.784000 audit: BPF prog-id=350 op=UNLOAD Sep 11 18:09:14.787269 kernel: audit: type=1334 audit(1789150154.784:1279): prog-id=346 op=UNLOAD Sep 11 18:09:14.787289 kernel: audit: type=1334 audit(1789150154.784:1280): prog-id=350 op=UNLOAD Sep 11 18:09:14.918699 systemd[1]: tmp-containerd\x2dmount928224747.mount: Deactivated successfully. Sep 11 18:09:14.984954 containerd[2527]: time="2026-09-11T18:09:14.984371772Z" level=info msg="connecting to shim d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455" address="unix:///run/containerd/s/c3a83374b5b71370caeb48743f7b910551e841922260d0458150365741ce667a" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:15.007177 systemd[1]: Started docker-d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455.scope - libcontainer container d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455. Sep 11 18:09:15.016000 audit: BPF prog-id=351 op=LOAD Sep 11 18:09:15.018000 audit: BPF prog-id=352 op=LOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=407ba02ffd8 a2=98 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.018000 audit: BPF prog-id=352 op=UNLOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.018000 audit: BPF prog-id=353 op=LOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=407ba030290 a2=98 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.018000 audit: BPF prog-id=354 op=LOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=407ba02ffe8 a2=98 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.018000 audit: BPF prog-id=354 op=UNLOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.018000 audit: BPF prog-id=353 op=UNLOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.018000 audit: BPF prog-id=355 op=LOAD Sep 11 18:09:15.018000 audit[8463]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=407ba0304f0 a2=98 a3=0 items=0 ppid=8451 pid=8463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333465376433383135333034613639373237343261633061 Sep 11 18:09:15.019856 kernel: audit: type=1334 audit(1789150155.016:1281): prog-id=351 op=LOAD Sep 11 18:09:15.041122 kernel: docker0: port 1(vethde23609) entered blocking state Sep 11 18:09:15.041176 kernel: docker0: port 1(vethde23609) entered disabled state Sep 11 18:09:15.043256 kernel: vethde23609: entered allmulticast mode Sep 11 18:09:15.037000 audit: ANOM_PROMISCUOUS dev=vethde23609 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:15.043386 kernel: vethde23609: entered promiscuous mode Sep 11 18:09:15.044606 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:15.037000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b66cc0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.037000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:15.046000 audit[8486]: NETFILTER_CFG table=raw:156 family=2 entries=1 op=nft_register_rule pid=8486 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:15.046000 audit[8486]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc78661a60 a2=0 a3=0 items=0 ppid=2991 pid=8486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:15.046000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:15.048470 systemd-networkd[2304]: vethde23609: Link UP Sep 11 18:09:15.055033 kernel: eth0: renamed from veth480a328 Sep 11 18:09:15.057314 kernel: docker0: port 1(vethde23609) entered blocking state Sep 11 18:09:15.057355 kernel: docker0: port 1(vethde23609) entered forwarding state Sep 11 18:09:15.057447 systemd-networkd[2304]: vethde23609: Gained carrier Sep 11 18:09:15.057940 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:15.079190 dockerd[2991]: time="2026-09-11T18:09:15.079161240Z" level=info msg="sbJoin: gwep4 ''->'1686db3aca2b', gwep6 ''->''" eid=1686db3aca2b ep=tender_liskov net=bridge nid=ad3b593e9776 Sep 11 18:09:15.145090 sshd[8410]: Connection closed by authenticating user root 118.194.249.186 port 33244 [preauth] Sep 11 18:09:15.145000 audit[8410]: AUDIT1109 pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:15.146316 systemd[1]: sshd@42-4121-10.0.0.33:22-118.194.249.186:33244.service: Deactivated successfully. Sep 11 18:09:15.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-4121-10.0.0.33:22-118.194.249.186:33244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:15.385204 systemd[1]: Started sshd@43-4122-10.0.0.33:22-118.194.249.186:42562.service - OpenSSH per-connection server daemon (118.194.249.186:42562). Sep 11 18:09:15.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-4122-10.0.0.33:22-118.194.249.186:42562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:16.102303 systemd[1]: docker-d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455.scope: Deactivated successfully. Sep 11 18:09:16.117369 dockerd[2991]: time="2026-09-11T18:09:16.117304931Z" level=info msg="ignoring event" container=d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:16.118099 containerd[2527]: time="2026-09-11T18:09:16.118062751Z" level=info msg="shim disconnected" id=d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455 namespace=moby Sep 11 18:09:16.118352 containerd[2527]: time="2026-09-11T18:09:16.118227341Z" level=info msg="cleaning up after shim disconnected" id=d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455 namespace=moby Sep 11 18:09:16.118352 containerd[2527]: time="2026-09-11T18:09:16.118239195Z" level=info msg="cleaning up dead shim" id=d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455 namespace=moby Sep 11 18:09:16.139901 systemd-networkd[2304]: vethde23609: Lost carrier Sep 11 18:09:16.141224 kernel: docker0: port 1(vethde23609) entered disabled state Sep 11 18:09:16.141259 kernel: veth480a328: renamed from eth0 Sep 11 18:09:16.163135 systemd-networkd[2304]: vethde23609: Gained IPv6LL Sep 11 18:09:16.163000 audit[8522]: NETFILTER_CFG table=raw:157 family=2 entries=1 op=nft_unregister_rule pid=8522 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:16.163000 audit[8522]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff605ea040 a2=0 a3=0 items=0 ppid=2991 pid=8522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.163000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:16.170697 systemd-networkd[2304]: vethde23609: Link DOWN Sep 11 18:09:16.173026 kernel: docker0: port 1(vethde23609) entered disabled state Sep 11 18:09:16.173300 kernel: vethde23609 (unregistering): left allmulticast mode Sep 11 18:09:16.174536 kernel: vethde23609 (unregistering): left promiscuous mode Sep 11 18:09:16.169000 audit: ANOM_PROMISCUOUS dev=vethde23609 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:16.175369 kernel: docker0: port 1(vethde23609) entered disabled state Sep 11 18:09:16.169000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbb260 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:16.186209 systemd[1]: run-docker-netns-33084bf6bf65.mount: Deactivated successfully. Sep 11 18:09:16.188721 systemd[1]: var-lib-docker-rootfs-overlayfs-d34e7d3815304a6972742ac0a0fd5a7d55a483f9df798829d761b55216616455.mount: Deactivated successfully. Sep 11 18:09:16.200000 audit: BPF prog-id=351 op=UNLOAD Sep 11 18:09:16.200000 audit: BPF prog-id=355 op=UNLOAD Sep 11 18:09:16.321452 systemd[1]: tmp-containerd\x2dmount3721736253.mount: Deactivated successfully. Sep 11 18:09:16.338451 sshd[8497]: Connection closed by authenticating user root 118.194.249.186 port 42562 [preauth] Sep 11 18:09:16.337000 audit[8497]: AUDIT1109 pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:16.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-4122-10.0.0.33:22-118.194.249.186:42562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:16.339793 systemd[1]: sshd@43-4122-10.0.0.33:22-118.194.249.186:42562.service: Deactivated successfully. Sep 11 18:09:16.396960 containerd[2527]: time="2026-09-11T18:09:16.396917897Z" level=info msg="connecting to shim 44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c" address="unix:///run/containerd/s/1af5ae4dfb36167b565f51c70f444ff6dc2f4a611dcb4d45adbf86238ef1461f" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:16.419220 systemd[1]: Started docker-44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c.scope - libcontainer container 44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c. Sep 11 18:09:16.427000 audit: BPF prog-id=356 op=LOAD Sep 11 18:09:16.428000 audit: BPF prog-id=357 op=LOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a10c6fcbfd8 a2=98 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.428000 audit: BPF prog-id=357 op=UNLOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.428000 audit: BPF prog-id=358 op=LOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a10c6fcc290 a2=98 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.428000 audit: BPF prog-id=359 op=LOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3a10c6fcbfe8 a2=98 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.428000 audit: BPF prog-id=359 op=UNLOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.428000 audit: BPF prog-id=358 op=UNLOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.428000 audit: BPF prog-id=360 op=LOAD Sep 11 18:09:16.428000 audit[8554]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a10c6fcc4f0 a2=98 a3=0 items=0 ppid=8543 pid=8554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34346239323132343332376635626534633465633532623532 Sep 11 18:09:16.454959 kernel: docker0: port 1(vethb595a20) entered blocking state Sep 11 18:09:16.455043 kernel: docker0: port 1(vethb595a20) entered disabled state Sep 11 18:09:16.455064 kernel: vethb595a20: entered allmulticast mode Sep 11 18:09:16.456616 kernel: vethb595a20: entered promiscuous mode Sep 11 18:09:16.451000 audit: ANOM_PROMISCUOUS dev=vethb595a20 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:16.451000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f11200 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.451000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:16.457319 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:16.458000 audit[8575]: NETFILTER_CFG table=raw:158 family=2 entries=1 op=nft_register_rule pid=8575 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:16.458000 audit[8575]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe54db56a0 a2=0 a3=0 items=0 ppid=2991 pid=8575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:16.458000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:16.460331 systemd-networkd[2304]: vethb595a20: Link UP Sep 11 18:09:16.467016 kernel: eth0: renamed from veth712a5c0 Sep 11 18:09:16.469037 kernel: docker0: port 1(vethb595a20) entered blocking state Sep 11 18:09:16.469085 kernel: docker0: port 1(vethb595a20) entered forwarding state Sep 11 18:09:16.469116 systemd-networkd[2304]: vethb595a20: Gained carrier Sep 11 18:09:16.469463 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:16.482847 dockerd[2991]: time="2026-09-11T18:09:16.482826414Z" level=info msg="sbJoin: gwep4 ''->'574af5d0e902', gwep6 ''->''" eid=574af5d0e902 ep=flamboyant_rosalind net=bridge nid=ad3b593e9776 Sep 11 18:09:16.568030 systemd[1]: Started sshd@44-4123-10.0.0.33:22-118.194.249.186:53474.service - OpenSSH per-connection server daemon (118.194.249.186:53474). Sep 11 18:09:16.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4123-10.0.0.33:22-118.194.249.186:53474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:17.486741 sshd[8584]: Connection closed by authenticating user root 118.194.249.186 port 53474 [preauth] Sep 11 18:09:17.486000 audit[8584]: AUDIT1109 pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:17.488507 systemd[1]: sshd@44-4123-10.0.0.33:22-118.194.249.186:53474.service: Deactivated successfully. Sep 11 18:09:17.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4123-10.0.0.33:22-118.194.249.186:53474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:17.507109 systemd-networkd[2304]: vethb595a20: Gained IPv6LL Sep 11 18:09:17.507407 systemd[1]: docker-44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c.scope: Deactivated successfully. Sep 11 18:09:17.520657 containerd[2527]: time="2026-09-11T18:09:17.520614778Z" level=info msg="shim disconnected" id=44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c namespace=moby Sep 11 18:09:17.520657 containerd[2527]: time="2026-09-11T18:09:17.520653237Z" level=info msg="cleaning up after shim disconnected" id=44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c namespace=moby Sep 11 18:09:17.520974 containerd[2527]: time="2026-09-11T18:09:17.520660800Z" level=info msg="cleaning up dead shim" id=44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c namespace=moby Sep 11 18:09:17.521001 dockerd[2991]: time="2026-09-11T18:09:17.520793212Z" level=info msg="ignoring event" container=44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:17.545824 systemd-networkd[2304]: vethb595a20: Lost carrier Sep 11 18:09:17.546447 kernel: docker0: port 1(vethb595a20) entered disabled state Sep 11 18:09:17.546479 kernel: veth712a5c0: renamed from eth0 Sep 11 18:09:17.559000 audit[8613]: NETFILTER_CFG table=raw:159 family=2 entries=1 op=nft_unregister_rule pid=8613 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:17.559000 audit[8613]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc6b4d5960 a2=0 a3=0 items=0 ppid=2991 pid=8613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.559000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:17.567373 systemd-networkd[2304]: vethb595a20: Link DOWN Sep 11 18:09:17.569077 kernel: docker0: port 1(vethb595a20) entered disabled state Sep 11 18:09:17.571553 kernel: vethb595a20 (unregistering): left allmulticast mode Sep 11 18:09:17.571602 kernel: vethb595a20 (unregistering): left promiscuous mode Sep 11 18:09:17.566000 audit: ANOM_PROMISCUOUS dev=vethb595a20 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:17.572829 kernel: docker0: port 1(vethb595a20) entered disabled state Sep 11 18:09:17.566000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77de0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.566000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:17.583147 systemd[1]: run-docker-netns-f3191f97dc49.mount: Deactivated successfully. Sep 11 18:09:17.587792 systemd[1]: var-lib-docker-rootfs-overlayfs-44b92124327f5be4c4ec52b5253471716cba3ab8cfacfb40494616b2f8e4982c.mount: Deactivated successfully. Sep 11 18:09:17.592000 audit: BPF prog-id=356 op=UNLOAD Sep 11 18:09:17.592000 audit: BPF prog-id=360 op=UNLOAD Sep 11 18:09:17.725861 systemd[1]: tmp-containerd\x2dmount3071730564.mount: Deactivated successfully. Sep 11 18:09:17.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-19-10.0.0.33:22-118.194.249.186:33194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:17.740368 systemd[1]: Started sshd@45-19-10.0.0.33:22-118.194.249.186:33194.service - OpenSSH per-connection server daemon (118.194.249.186:33194). Sep 11 18:09:17.830260 containerd[2527]: time="2026-09-11T18:09:17.830218233Z" level=info msg="connecting to shim 37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9" address="unix:///run/containerd/s/2c19426d2706abae08dcb245519cd494f2f240b80e25d0c25a8bd8f31b252d77" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:17.850180 systemd[1]: Started docker-37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9.scope - libcontainer container 37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9. Sep 11 18:09:17.857000 audit: BPF prog-id=361 op=LOAD Sep 11 18:09:17.858000 audit: BPF prog-id=362 op=LOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=319168ef1fd8 a2=98 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.858000 audit: BPF prog-id=362 op=UNLOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.858000 audit: BPF prog-id=363 op=LOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=319168ef2290 a2=98 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.858000 audit: BPF prog-id=364 op=LOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=319168ef1fe8 a2=98 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.858000 audit: BPF prog-id=364 op=UNLOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.858000 audit: BPF prog-id=363 op=UNLOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.858000 audit: BPF prog-id=365 op=LOAD Sep 11 18:09:17.858000 audit[8645]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=319168ef24f0 a2=98 a3=0 items=0 ppid=8633 pid=8645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33376535643139613130626235333633633831393639656439 Sep 11 18:09:17.881082 kernel: docker0: port 1(veth56d5510) entered blocking state Sep 11 18:09:17.881137 kernel: docker0: port 1(veth56d5510) entered disabled state Sep 11 18:09:17.881154 kernel: veth56d5510: entered allmulticast mode Sep 11 18:09:17.883219 kernel: veth56d5510: entered promiscuous mode Sep 11 18:09:17.877000 audit: ANOM_PROMISCUOUS dev=veth56d5510 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:17.877000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81143a600 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.877000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:17.885065 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:17.885000 audit[8666]: NETFILTER_CFG table=raw:160 family=2 entries=1 op=nft_register_rule pid=8666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:17.885000 audit[8666]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd98ce6f50 a2=0 a3=0 items=0 ppid=2991 pid=8666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:17.885000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:17.886788 systemd-networkd[2304]: veth56d5510: Link UP Sep 11 18:09:17.894560 kernel: eth0: renamed from vethd883b9e Sep 11 18:09:17.894613 kernel: docker0: port 1(veth56d5510) entered blocking state Sep 11 18:09:17.896028 kernel: docker0: port 1(veth56d5510) entered forwarding state Sep 11 18:09:17.895972 systemd-networkd[2304]: veth56d5510: Gained carrier Sep 11 18:09:17.896180 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:17.904259 dockerd[2991]: time="2026-09-11T18:09:17.904228069Z" level=info msg="sbJoin: gwep4 ''->'f0c07c0c5e55', gwep6 ''->''" eid=f0c07c0c5e55 ep=cranky_visvesvaraya net=bridge nid=ad3b593e9776 Sep 11 18:09:18.689509 sshd[8622]: Connection closed by authenticating user root 118.194.249.186 port 33194 [preauth] Sep 11 18:09:18.688000 audit[8622]: AUDIT1109 pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:18.690941 systemd[1]: sshd@45-19-10.0.0.33:22-118.194.249.186:33194.service: Deactivated successfully. Sep 11 18:09:18.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-19-10.0.0.33:22-118.194.249.186:33194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:18.929935 systemd[1]: docker-37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9.scope: Deactivated successfully. Sep 11 18:09:18.933240 systemd[1]: Started sshd@46-20-10.0.0.33:22-118.194.249.186:49328.service - OpenSSH per-connection server daemon (118.194.249.186:49328). Sep 11 18:09:18.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-20-10.0.0.33:22-118.194.249.186:49328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:18.943636 dockerd[2991]: time="2026-09-11T18:09:18.943577647Z" level=info msg="ignoring event" container=37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:18.944350 containerd[2527]: time="2026-09-11T18:09:18.944320527Z" level=info msg="shim disconnected" id=37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9 namespace=moby Sep 11 18:09:18.944639 containerd[2527]: time="2026-09-11T18:09:18.944625660Z" level=info msg="cleaning up after shim disconnected" id=37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9 namespace=moby Sep 11 18:09:18.944696 containerd[2527]: time="2026-09-11T18:09:18.944679739Z" level=info msg="cleaning up dead shim" id=37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9 namespace=moby Sep 11 18:09:18.970755 systemd-networkd[2304]: veth56d5510: Lost carrier Sep 11 18:09:18.971022 kernel: docker0: port 1(veth56d5510) entered disabled state Sep 11 18:09:18.972046 kernel: vethd883b9e: renamed from eth0 Sep 11 18:09:18.989000 audit[8701]: NETFILTER_CFG table=raw:161 family=2 entries=1 op=nft_unregister_rule pid=8701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:18.989000 audit[8701]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd89b1aa00 a2=0 a3=0 items=0 ppid=2991 pid=8701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:18.989000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:18.994717 systemd-networkd[2304]: veth56d5510: Link DOWN Sep 11 18:09:18.997635 kernel: docker0: port 1(veth56d5510) entered disabled state Sep 11 18:09:18.997683 kernel: veth56d5510 (unregistering): left allmulticast mode Sep 11 18:09:18.999119 kernel: veth56d5510 (unregistering): left promiscuous mode Sep 11 18:09:18.993000 audit: ANOM_PROMISCUOUS dev=veth56d5510 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:19.000524 kernel: docker0: port 1(veth56d5510) entered disabled state Sep 11 18:09:18.993000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e860 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:18.993000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:19.012169 systemd[1]: run-docker-netns-f0a31a7ef69d.mount: Deactivated successfully. Sep 11 18:09:19.015968 systemd[1]: var-lib-docker-rootfs-overlayfs-37e5d19a10bb5363c81969ed9dd3f8d00dd42f827e06be68307957b356dba7a9.mount: Deactivated successfully. Sep 11 18:09:19.028000 audit: BPF prog-id=361 op=UNLOAD Sep 11 18:09:19.028000 audit: BPF prog-id=365 op=UNLOAD Sep 11 18:09:19.118069 systemd[1]: tmp-containerd\x2dmount108002256.mount: Deactivated successfully. Sep 11 18:09:19.191636 containerd[2527]: time="2026-09-11T18:09:19.191596210Z" level=info msg="connecting to shim 73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd" address="unix:///run/containerd/s/512d7109fc34f681d94fb1c23048dda9b678e69dcf6e0725fed257605049b012" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:19.215156 systemd[1]: Started docker-73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd.scope - libcontainer container 73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd. Sep 11 18:09:19.223000 audit: BPF prog-id=366 op=LOAD Sep 11 18:09:19.225057 kernel: kauditd_printk_skb: 119 callbacks suppressed Sep 11 18:09:19.225121 kernel: audit: type=1334 audit(1789150159.223:1335): prog-id=366 op=LOAD Sep 11 18:09:19.223000 audit: BPF prog-id=367 op=LOAD Sep 11 18:09:19.226631 kernel: audit: type=1334 audit(1789150159.223:1336): prog-id=367 op=LOAD Sep 11 18:09:19.223000 audit[8730]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=29e2d5753fd8 a2=98 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.229567 kernel: audit: type=1300 audit(1789150159.223:1336): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=29e2d5753fd8 a2=98 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.232813 kernel: audit: type=1327 audit(1789150159.223:1336): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.224000 audit: BPF prog-id=367 op=UNLOAD Sep 11 18:09:19.234184 kernel: audit: type=1334 audit(1789150159.224:1337): prog-id=367 op=UNLOAD Sep 11 18:09:19.224000 audit[8730]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.237757 kernel: audit: type=1300 audit(1789150159.224:1337): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.241469 kernel: audit: type=1327 audit(1789150159.224:1337): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.224000 audit: BPF prog-id=368 op=LOAD Sep 11 18:09:19.242582 kernel: audit: type=1334 audit(1789150159.224:1338): prog-id=368 op=LOAD Sep 11 18:09:19.224000 audit[8730]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=29e2d5754290 a2=98 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.246057 kernel: audit: type=1300 audit(1789150159.224:1338): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=29e2d5754290 a2=98 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.224000 audit: BPF prog-id=369 op=LOAD Sep 11 18:09:19.224000 audit[8730]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=29e2d5753fe8 a2=98 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.224000 audit: BPF prog-id=369 op=UNLOAD Sep 11 18:09:19.224000 audit[8730]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.250012 kernel: audit: type=1327 audit(1789150159.224:1338): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.224000 audit: BPF prog-id=368 op=UNLOAD Sep 11 18:09:19.224000 audit[8730]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.224000 audit: BPF prog-id=370 op=LOAD Sep 11 18:09:19.224000 audit[8730]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=29e2d57544f0 a2=98 a3=0 items=0 ppid=8719 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37336566636561633966386461623162366434313964303038 Sep 11 18:09:19.261342 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:19.262642 kernel: docker0: port 1(veth251b363) entered blocking state Sep 11 18:09:19.262670 kernel: docker0: port 1(veth251b363) entered disabled state Sep 11 18:09:19.263444 kernel: veth251b363: entered allmulticast mode Sep 11 18:09:19.264142 kernel: veth251b363: entered promiscuous mode Sep 11 18:09:19.259000 audit: ANOM_PROMISCUOUS dev=veth251b363 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:19.259000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812076180 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.259000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:19.266000 audit[8752]: NETFILTER_CFG table=raw:162 family=2 entries=1 op=nft_register_rule pid=8752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:19.266000 audit[8752]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffba570670 a2=0 a3=0 items=0 ppid=2991 pid=8752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:19.266000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:19.267700 systemd-networkd[2304]: veth251b363: Link UP Sep 11 18:09:19.277034 kernel: eth0: renamed from veth280e398 Sep 11 18:09:19.277090 kernel: docker0: port 1(veth251b363) entered blocking state Sep 11 18:09:19.278905 kernel: docker0: port 1(veth251b363) entered forwarding state Sep 11 18:09:19.279488 systemd-networkd[2304]: veth251b363: Gained carrier Sep 11 18:09:19.279722 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:19.290932 dockerd[2991]: time="2026-09-11T18:09:19.289998450Z" level=info msg="sbJoin: gwep4 ''->'b0ed34b9e2b9', gwep6 ''->''" eid=b0ed34b9e2b9 ep=elegant_ganguly net=bridge nid=ad3b593e9776 Sep 11 18:09:19.887901 sshd[8677]: Connection closed by authenticating user root 118.194.249.186 port 49328 [preauth] Sep 11 18:09:19.887000 audit[8677]: AUDIT1109 pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:19.889595 systemd[1]: sshd@46-20-10.0.0.33:22-118.194.249.186:49328.service: Deactivated successfully. Sep 11 18:09:19.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-20-10.0.0.33:22-118.194.249.186:49328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:20.120381 systemd[1]: Started sshd@47-4124-10.0.0.33:22-118.194.249.186:41932.service - OpenSSH per-connection server daemon (118.194.249.186:41932). Sep 11 18:09:20.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4124-10.0.0.33:22-118.194.249.186:41932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:20.327102 systemd[1]: docker-73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd.scope: Deactivated successfully. Sep 11 18:09:20.339565 containerd[2527]: time="2026-09-11T18:09:20.339535251Z" level=info msg="shim disconnected" id=73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd namespace=moby Sep 11 18:09:20.339865 dockerd[2991]: time="2026-09-11T18:09:20.339568876Z" level=info msg="ignoring event" container=73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:20.340470 containerd[2527]: time="2026-09-11T18:09:20.340450123Z" level=info msg="cleaning up after shim disconnected" id=73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd namespace=moby Sep 11 18:09:20.340621 containerd[2527]: time="2026-09-11T18:09:20.340595416Z" level=info msg="cleaning up dead shim" id=73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd namespace=moby Sep 11 18:09:20.363734 systemd-networkd[2304]: veth251b363: Lost carrier Sep 11 18:09:20.364059 kernel: docker0: port 1(veth251b363) entered disabled state Sep 11 18:09:20.364091 kernel: veth280e398: renamed from eth0 Sep 11 18:09:20.380000 audit[8787]: NETFILTER_CFG table=raw:163 family=2 entries=1 op=nft_unregister_rule pid=8787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:20.380000 audit[8787]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcc1686d60 a2=0 a3=0 items=0 ppid=2991 pid=8787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.380000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:20.384369 systemd-networkd[2304]: veth251b363: Link DOWN Sep 11 18:09:20.386030 kernel: docker0: port 1(veth251b363) entered disabled state Sep 11 18:09:20.388310 kernel: veth251b363 (unregistering): left allmulticast mode Sep 11 18:09:20.388359 kernel: veth251b363 (unregistering): left promiscuous mode Sep 11 18:09:20.389550 kernel: docker0: port 1(veth251b363) entered disabled state Sep 11 18:09:20.383000 audit: ANOM_PROMISCUOUS dev=veth251b363 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:20.383000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4fae0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.383000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:20.397385 systemd[1]: run-docker-netns-7d06d1b511ee.mount: Deactivated successfully. Sep 11 18:09:20.402284 systemd[1]: var-lib-docker-rootfs-overlayfs-73efceac9f8dab1b6d419d00822a45abfb29b7be4a18f3bdb9685e6dc5912ddd.mount: Deactivated successfully. Sep 11 18:09:20.407000 audit: BPF prog-id=366 op=UNLOAD Sep 11 18:09:20.407000 audit: BPF prog-id=370 op=UNLOAD Sep 11 18:09:20.515482 systemd[1]: tmp-containerd\x2dmount562169530.mount: Deactivated successfully. Sep 11 18:09:20.581204 containerd[2527]: time="2026-09-11T18:09:20.580739447Z" level=info msg="connecting to shim 55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13" address="unix:///run/containerd/s/776a9ffeda6dee16e6965854e2816347577c2b63fd15f40fc200447ac97cee8d" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:20.610163 systemd[1]: Started docker-55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13.scope - libcontainer container 55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13. Sep 11 18:09:20.617000 audit: BPF prog-id=371 op=LOAD Sep 11 18:09:20.618000 audit: BPF prog-id=372 op=LOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2a6e33629fd8 a2=98 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.618000 audit: BPF prog-id=372 op=UNLOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.618000 audit: BPF prog-id=373 op=LOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2a6e3362a290 a2=98 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.618000 audit: BPF prog-id=374 op=LOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=2a6e33629fe8 a2=98 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.618000 audit: BPF prog-id=374 op=UNLOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.618000 audit: BPF prog-id=373 op=UNLOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.618000 audit: BPF prog-id=375 op=LOAD Sep 11 18:09:20.618000 audit[8816]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2a6e3362a4f0 a2=98 a3=0 items=0 ppid=8805 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356464653162323363346236386266613631313861356461 Sep 11 18:09:20.642909 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:20.643467 kernel: docker0: port 1(veth262cae2) entered blocking state Sep 11 18:09:20.643501 kernel: docker0: port 1(veth262cae2) entered disabled state Sep 11 18:09:20.644443 kernel: veth262cae2: entered allmulticast mode Sep 11 18:09:20.645439 kernel: veth262cae2: entered promiscuous mode Sep 11 18:09:20.640000 audit: ANOM_PROMISCUOUS dev=veth262cae2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:20.640000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811310de0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.640000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:20.646000 audit[8837]: NETFILTER_CFG table=raw:164 family=2 entries=1 op=nft_register_rule pid=8837 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:20.646000 audit[8837]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd45804570 a2=0 a3=0 items=0 ppid=2991 pid=8837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:20.646000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:20.648243 systemd-networkd[2304]: veth262cae2: Link UP Sep 11 18:09:20.656028 kernel: eth0: renamed from vethb2ea95c Sep 11 18:09:20.658078 kernel: docker0: port 1(veth262cae2) entered blocking state Sep 11 18:09:20.658129 kernel: docker0: port 1(veth262cae2) entered forwarding state Sep 11 18:09:20.658498 systemd-networkd[2304]: veth262cae2: Gained carrier Sep 11 18:09:20.659063 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:20.670019 dockerd[2991]: time="2026-09-11T18:09:20.666069210Z" level=info msg="sbJoin: gwep4 ''->'76592d24fa9a', gwep6 ''->''" eid=76592d24fa9a ep=jolly_black net=bridge nid=ad3b593e9776 Sep 11 18:09:21.046500 sshd[8763]: Connection closed by authenticating user root 118.194.249.186 port 41932 [preauth] Sep 11 18:09:21.045000 audit[8763]: AUDIT1109 pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:21.048173 systemd[1]: sshd@47-4124-10.0.0.33:22-118.194.249.186:41932.service: Deactivated successfully. Sep 11 18:09:21.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4124-10.0.0.33:22-118.194.249.186:41932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:21.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-21-10.0.0.33:22-118.194.249.186:56386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:21.281574 systemd[1]: Started sshd@48-21-10.0.0.33:22-118.194.249.186:56386.service - OpenSSH per-connection server daemon (118.194.249.186:56386). Sep 11 18:09:21.688573 systemd[1]: docker-55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13.scope: Deactivated successfully. Sep 11 18:09:21.703497 dockerd[2991]: time="2026-09-11T18:09:21.703460440Z" level=info msg="ignoring event" container=55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:21.703974 containerd[2527]: time="2026-09-11T18:09:21.703562784Z" level=info msg="shim disconnected" id=55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13 namespace=moby Sep 11 18:09:21.703974 containerd[2527]: time="2026-09-11T18:09:21.703593390Z" level=info msg="cleaning up after shim disconnected" id=55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13 namespace=moby Sep 11 18:09:21.703974 containerd[2527]: time="2026-09-11T18:09:21.703601213Z" level=info msg="cleaning up dead shim" id=55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13 namespace=moby Sep 11 18:09:21.729028 kernel: docker0: port 1(veth262cae2) entered disabled state Sep 11 18:09:21.729108 kernel: vethb2ea95c: renamed from eth0 Sep 11 18:09:21.729118 systemd-networkd[2304]: veth262cae2: Lost carrier Sep 11 18:09:21.738000 audit[8874]: NETFILTER_CFG table=raw:165 family=2 entries=1 op=nft_unregister_rule pid=8874 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:21.738000 audit[8874]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc28cd8b10 a2=0 a3=0 items=0 ppid=2991 pid=8874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:21.738000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:21.747441 systemd-networkd[2304]: veth262cae2: Link DOWN Sep 11 18:09:21.749316 kernel: docker0: port 1(veth262cae2) entered disabled state Sep 11 18:09:21.751276 kernel: veth262cae2 (unregistering): left allmulticast mode Sep 11 18:09:21.751328 kernel: veth262cae2 (unregistering): left promiscuous mode Sep 11 18:09:21.746000 audit: ANOM_PROMISCUOUS dev=veth262cae2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:21.752288 kernel: docker0: port 1(veth262cae2) entered disabled state Sep 11 18:09:21.746000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e1e20 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:21.746000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:21.774113 systemd[1]: run-docker-netns-d32076413bdd.mount: Deactivated successfully. Sep 11 18:09:21.780439 systemd[1]: var-lib-docker-rootfs-overlayfs-55dde1b23c4b68bfa6118a5da5e449fa800aedcd7d471f3e7484aa455f250b13.mount: Deactivated successfully. Sep 11 18:09:21.786000 audit: BPF prog-id=371 op=UNLOAD Sep 11 18:09:21.786000 audit: BPF prog-id=375 op=UNLOAD Sep 11 18:09:21.937372 systemd[1]: tmp-containerd\x2dmount3194835071.mount: Deactivated successfully. Sep 11 18:09:22.041780 containerd[2527]: time="2026-09-11T18:09:22.041339708Z" level=info msg="connecting to shim fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e" address="unix:///run/containerd/s/6832bee37269a58157cbfc8adfccf1272c7d0c81f2910c112122a4ef1e5767b5" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:22.062196 systemd[1]: Started docker-fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e.scope - libcontainer container fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e. Sep 11 18:09:22.069000 audit: BPF prog-id=376 op=LOAD Sep 11 18:09:22.069000 audit: BPF prog-id=377 op=LOAD Sep 11 18:09:22.069000 audit[8902]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2a07a9bd5fd8 a2=98 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.070000 audit: BPF prog-id=377 op=UNLOAD Sep 11 18:09:22.070000 audit[8902]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.070000 audit: BPF prog-id=378 op=LOAD Sep 11 18:09:22.070000 audit[8902]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2a07a9bd6290 a2=98 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.070000 audit: BPF prog-id=379 op=LOAD Sep 11 18:09:22.070000 audit[8902]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2a07a9bd5fe8 a2=98 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.070000 audit: BPF prog-id=379 op=UNLOAD Sep 11 18:09:22.070000 audit[8902]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.070000 audit: BPF prog-id=378 op=UNLOAD Sep 11 18:09:22.070000 audit[8902]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.070000 audit: BPF prog-id=380 op=LOAD Sep 11 18:09:22.070000 audit[8902]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2a07a9bd64f0 a2=98 a3=0 items=0 ppid=8891 pid=8902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66646565353638313739653362646362383432623231393464 Sep 11 18:09:22.091090 kernel: docker0: port 1(vethc0192e3) entered blocking state Sep 11 18:09:22.091227 kernel: docker0: port 1(vethc0192e3) entered disabled state Sep 11 18:09:22.092187 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:22.088000 audit: ANOM_PROMISCUOUS dev=vethc0192e3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:22.088000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811777080 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.088000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:22.095330 kernel: vethc0192e3: entered allmulticast mode Sep 11 18:09:22.095356 kernel: vethc0192e3: entered promiscuous mode Sep 11 18:09:22.096000 audit[8923]: NETFILTER_CFG table=raw:166 family=2 entries=1 op=nft_register_rule pid=8923 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:22.096000 audit[8923]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffda464270 a2=0 a3=0 items=0 ppid=2991 pid=8923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:22.096000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:22.098570 systemd-networkd[2304]: vethc0192e3: Link UP Sep 11 18:09:22.106023 kernel: eth0: renamed from veth8a5b4b9 Sep 11 18:09:22.108103 kernel: docker0: port 1(vethc0192e3) entered blocking state Sep 11 18:09:22.108160 kernel: docker0: port 1(vethc0192e3) entered forwarding state Sep 11 18:09:22.108238 systemd-networkd[2304]: vethc0192e3: Gained carrier Sep 11 18:09:22.108610 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:22.117289 dockerd[2991]: time="2026-09-11T18:09:22.117260946Z" level=info msg="sbJoin: gwep4 ''->'40ac6db70494', gwep6 ''->''" eid=40ac6db70494 ep=practical_banzai net=bridge nid=ad3b593e9776 Sep 11 18:09:22.203560 sshd[8848]: Connection closed by authenticating user root 118.194.249.186 port 56386 [preauth] Sep 11 18:09:22.202000 audit[8848]: AUDIT1109 pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:22.205124 systemd[1]: sshd@48-21-10.0.0.33:22-118.194.249.186:56386.service: Deactivated successfully. Sep 11 18:09:22.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-21-10.0.0.33:22-118.194.249.186:56386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:22.448676 systemd[1]: Started sshd@49-4125-10.0.0.33:22-118.194.249.186:43594.service - OpenSSH per-connection server daemon (118.194.249.186:43594). Sep 11 18:09:22.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4125-10.0.0.33:22-118.194.249.186:43594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:23.141361 systemd[1]: docker-fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e.scope: Deactivated successfully. Sep 11 18:09:23.154248 dockerd[2991]: time="2026-09-11T18:09:23.154110262Z" level=info msg="ignoring event" container=fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:23.154567 containerd[2527]: time="2026-09-11T18:09:23.154065491Z" level=info msg="shim disconnected" id=fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e namespace=moby Sep 11 18:09:23.154567 containerd[2527]: time="2026-09-11T18:09:23.154247802Z" level=info msg="cleaning up after shim disconnected" id=fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e namespace=moby Sep 11 18:09:23.154567 containerd[2527]: time="2026-09-11T18:09:23.154255945Z" level=info msg="cleaning up dead shim" id=fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e namespace=moby Sep 11 18:09:23.178698 systemd-networkd[2304]: vethc0192e3: Lost carrier Sep 11 18:09:23.179501 kernel: docker0: port 1(vethc0192e3) entered disabled state Sep 11 18:09:23.179564 kernel: veth8a5b4b9: renamed from eth0 Sep 11 18:09:23.199000 audit[8960]: NETFILTER_CFG table=raw:167 family=2 entries=1 op=nft_unregister_rule pid=8960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:23.199000 audit[8960]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff440b3d20 a2=0 a3=0 items=0 ppid=2991 pid=8960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.199000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:23.209402 systemd-networkd[2304]: vethc0192e3: Link DOWN Sep 11 18:09:23.211030 kernel: docker0: port 1(vethc0192e3) entered disabled state Sep 11 18:09:23.213122 kernel: vethc0192e3 (unregistering): left allmulticast mode Sep 11 18:09:23.213185 kernel: vethc0192e3 (unregistering): left promiscuous mode Sep 11 18:09:23.214033 kernel: docker0: port 1(vethc0192e3) entered disabled state Sep 11 18:09:23.208000 audit: ANOM_PROMISCUOUS dev=vethc0192e3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:23.208000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dba600 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.208000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:23.225287 systemd[1]: run-docker-netns-fb5df0db720e.mount: Deactivated successfully. Sep 11 18:09:23.229750 systemd[1]: var-lib-docker-rootfs-overlayfs-fdee568179e3bdcb842b2194dea668f77010a12ec3ee003146a03e5c31d6ce4e.mount: Deactivated successfully. Sep 11 18:09:23.238000 audit: BPF prog-id=376 op=UNLOAD Sep 11 18:09:23.238000 audit: BPF prog-id=380 op=UNLOAD Sep 11 18:09:23.359922 systemd[1]: tmp-containerd\x2dmount3979848246.mount: Deactivated successfully. Sep 11 18:09:23.395876 sshd[8934]: Connection closed by authenticating user root 118.194.249.186 port 43594 [preauth] Sep 11 18:09:23.395000 audit[8934]: AUDIT1109 pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:23.397777 systemd[1]: sshd@49-4125-10.0.0.33:22-118.194.249.186:43594.service: Deactivated successfully. Sep 11 18:09:23.397000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4125-10.0.0.33:22-118.194.249.186:43594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:23.432471 containerd[2527]: time="2026-09-11T18:09:23.432432785Z" level=info msg="connecting to shim d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9" address="unix:///run/containerd/s/5d856d3df77b330b80f17920fe71dbb97f3f0b5a810e4bed4c81f620abf247a8" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:23.454175 systemd[1]: Started docker-d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9.scope - libcontainer container d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9. Sep 11 18:09:23.461000 audit: BPF prog-id=381 op=LOAD Sep 11 18:09:23.462000 audit: BPF prog-id=382 op=LOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=bb9b9665fd8 a2=98 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.462000 audit: BPF prog-id=382 op=UNLOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.462000 audit: BPF prog-id=383 op=LOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=bb9b9666290 a2=98 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.462000 audit: BPF prog-id=384 op=LOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=bb9b9665fe8 a2=98 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.462000 audit: BPF prog-id=384 op=UNLOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.462000 audit: BPF prog-id=383 op=UNLOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.462000 audit: BPF prog-id=385 op=LOAD Sep 11 18:09:23.462000 audit[8991]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=bb9b96664f0 a2=98 a3=0 items=0 ppid=8980 pid=8991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64373232636234396234303166636434313637613065633065 Sep 11 18:09:23.482652 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:23.484394 kernel: docker0: port 1(veth7868c3e) entered blocking state Sep 11 18:09:23.484520 kernel: docker0: port 1(veth7868c3e) entered disabled state Sep 11 18:09:23.485351 kernel: veth7868c3e: entered allmulticast mode Sep 11 18:09:23.486275 kernel: veth7868c3e: entered promiscuous mode Sep 11 18:09:23.481000 audit: ANOM_PROMISCUOUS dev=veth7868c3e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:23.481000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f10090 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.481000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:23.487000 audit[9014]: NETFILTER_CFG table=raw:168 family=2 entries=1 op=nft_register_rule pid=9014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:23.487000 audit[9014]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe00aae910 a2=0 a3=0 items=0 ppid=2991 pid=9014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:23.487000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:23.488870 systemd-networkd[2304]: veth7868c3e: Link UP Sep 11 18:09:23.496023 kernel: eth0: renamed from vethc5eea48 Sep 11 18:09:23.497908 kernel: docker0: port 1(veth7868c3e) entered blocking state Sep 11 18:09:23.497951 kernel: docker0: port 1(veth7868c3e) entered forwarding state Sep 11 18:09:23.498120 systemd-networkd[2304]: veth7868c3e: Gained carrier Sep 11 18:09:23.498390 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:23.505733 dockerd[2991]: time="2026-09-11T18:09:23.505703928Z" level=info msg="sbJoin: gwep4 ''->'90d271915974', gwep6 ''->''" eid=90d271915974 ep=quirky_williamson net=bridge nid=ad3b593e9776 Sep 11 18:09:23.629328 systemd[1]: Started sshd@50-4126-10.0.0.33:22-118.194.249.186:34534.service - OpenSSH per-connection server daemon (118.194.249.186:34534). Sep 11 18:09:23.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-4126-10.0.0.33:22-118.194.249.186:34534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:24.530643 systemd[1]: docker-d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9.scope: Deactivated successfully. Sep 11 18:09:24.543074 dockerd[2991]: time="2026-09-11T18:09:24.542871351Z" level=info msg="ignoring event" container=d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:24.543522 containerd[2527]: time="2026-09-11T18:09:24.542724921Z" level=info msg="shim disconnected" id=d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9 namespace=moby Sep 11 18:09:24.543522 containerd[2527]: time="2026-09-11T18:09:24.543157973Z" level=info msg="cleaning up after shim disconnected" id=d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9 namespace=moby Sep 11 18:09:24.543522 containerd[2527]: time="2026-09-11T18:09:24.543169089Z" level=info msg="cleaning up dead shim" id=d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9 namespace=moby Sep 11 18:09:24.553502 sshd[9023]: Connection closed by authenticating user root 118.194.249.186 port 34534 [preauth] Sep 11 18:09:24.552000 audit[9023]: AUDIT1109 pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:24.560375 kernel: kauditd_printk_skb: 138 callbacks suppressed Sep 11 18:09:24.554817 systemd[1]: sshd@50-4126-10.0.0.33:22-118.194.249.186:34534.service: Deactivated successfully. Sep 11 18:09:24.560494 kernel: audit: type=1109 audit(1789150164.552:1399): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:24.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-4126-10.0.0.33:22-118.194.249.186:34534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:24.564899 kernel: audit: type=1131 audit(1789150164.554:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-4126-10.0.0.33:22-118.194.249.186:34534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:24.572438 systemd-networkd[2304]: veth7868c3e: Lost carrier Sep 11 18:09:24.573402 kernel: docker0: port 1(veth7868c3e) entered disabled state Sep 11 18:09:24.573447 kernel: vethc5eea48: renamed from eth0 Sep 11 18:09:24.596000 audit[9049]: NETFILTER_CFG table=raw:169 family=2 entries=1 op=nft_unregister_rule pid=9049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:24.596000 audit[9049]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe79cf8220 a2=0 a3=0 items=0 ppid=2991 pid=9049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.601552 kernel: audit: type=1325 audit(1789150164.596:1401): table=raw:169 family=2 entries=1 op=nft_unregister_rule pid=9049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:24.601646 kernel: audit: type=1300 audit(1789150164.596:1401): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe79cf8220 a2=0 a3=0 items=0 ppid=2991 pid=9049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.596000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:24.603530 kernel: audit: type=1327 audit(1789150164.596:1401): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:24.605755 systemd-networkd[2304]: veth7868c3e: Link DOWN Sep 11 18:09:24.607025 kernel: docker0: port 1(veth7868c3e) entered disabled state Sep 11 18:09:24.609247 kernel: veth7868c3e (unregistering): left allmulticast mode Sep 11 18:09:24.604000 audit: ANOM_PROMISCUOUS dev=veth7868c3e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:24.611358 kernel: veth7868c3e (unregistering): left promiscuous mode Sep 11 18:09:24.611381 kernel: docker0: port 1(veth7868c3e) entered disabled state Sep 11 18:09:24.611396 kernel: audit: type=1700 audit(1789150164.604:1402): dev=veth7868c3e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:24.604000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76a00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.604000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:24.625348 systemd[1]: run-docker-netns-f40081fa9bb7.mount: Deactivated successfully. Sep 11 18:09:24.627277 kernel: audit: type=1300 audit(1789150164.604:1402): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76a00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.627320 kernel: audit: type=1327 audit(1789150164.604:1402): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:24.632975 systemd[1]: var-lib-docker-rootfs-overlayfs-d722cb49b401fcd4167a0ec0ef3ffc380562bc202f3f349e1e38df54ab7e65d9.mount: Deactivated successfully. Sep 11 18:09:24.637000 audit: BPF prog-id=381 op=UNLOAD Sep 11 18:09:24.637000 audit: BPF prog-id=385 op=UNLOAD Sep 11 18:09:24.640287 kernel: audit: type=1334 audit(1789150164.637:1403): prog-id=381 op=UNLOAD Sep 11 18:09:24.640306 kernel: audit: type=1334 audit(1789150164.637:1404): prog-id=385 op=UNLOAD Sep 11 18:09:24.772660 systemd[1]: tmp-containerd\x2dmount601686539.mount: Deactivated successfully. Sep 11 18:09:24.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-22-10.0.0.33:22-118.194.249.186:51944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:24.807872 systemd[1]: Started sshd@51-22-10.0.0.33:22-118.194.249.186:51944.service - OpenSSH per-connection server daemon (118.194.249.186:51944). Sep 11 18:09:24.883488 containerd[2527]: time="2026-09-11T18:09:24.883447199Z" level=info msg="connecting to shim 849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0" address="unix:///run/containerd/s/8c0a5ed84a086cd68e26eea9749a96c1f60e50580b6e6ea4e2eef84005be11f1" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:24.904144 systemd[1]: Started docker-849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0.scope - libcontainer container 849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0. Sep 11 18:09:24.912000 audit: BPF prog-id=386 op=LOAD Sep 11 18:09:24.912000 audit: BPF prog-id=387 op=LOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=18f7603b1fd8 a2=98 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.912000 audit: BPF prog-id=387 op=UNLOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.912000 audit: BPF prog-id=388 op=LOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=18f7603b2290 a2=98 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.912000 audit: BPF prog-id=389 op=LOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=18f7603b1fe8 a2=98 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.912000 audit: BPF prog-id=389 op=UNLOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.912000 audit: BPF prog-id=388 op=UNLOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.912000 audit: BPF prog-id=390 op=LOAD Sep 11 18:09:24.912000 audit[9081]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=18f7603b24f0 a2=98 a3=0 items=0 ppid=9070 pid=9081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343965626262366161386639366630323732383664613733 Sep 11 18:09:24.937432 kernel: docker0: port 1(vethf05f676) entered blocking state Sep 11 18:09:24.937489 kernel: docker0: port 1(vethf05f676) entered disabled state Sep 11 18:09:24.938588 kernel: vethf05f676: entered allmulticast mode Sep 11 18:09:24.933000 audit: ANOM_PROMISCUOUS dev=vethf05f676 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:24.939680 kernel: vethf05f676: entered promiscuous mode Sep 11 18:09:24.940434 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:24.933000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b670e0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.933000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:24.942000 audit[9101]: NETFILTER_CFG table=raw:170 family=2 entries=1 op=nft_register_rule pid=9101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:24.942000 audit[9101]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd2fc1a7a0 a2=0 a3=0 items=0 ppid=2991 pid=9101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:24.942000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:24.943901 systemd-networkd[2304]: vethf05f676: Link UP Sep 11 18:09:24.956026 kernel: eth0: renamed from veth3073f41 Sep 11 18:09:24.956079 kernel: docker0: port 1(vethf05f676) entered blocking state Sep 11 18:09:24.958049 kernel: docker0: port 1(vethf05f676) entered forwarding state Sep 11 18:09:24.958215 systemd-networkd[2304]: vethf05f676: Gained carrier Sep 11 18:09:24.958504 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:24.966322 dockerd[2991]: time="2026-09-11T18:09:24.966295187Z" level=info msg="sbJoin: gwep4 ''->'42e60921275f', gwep6 ''->''" eid=42e60921275f ep=zealous_sammet net=bridge nid=ad3b593e9776 Sep 11 18:09:25.763390 sshd[9058]: Connection closed by authenticating user root 118.194.249.186 port 51944 [preauth] Sep 11 18:09:25.762000 audit[9058]: AUDIT1109 pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:25.765257 systemd[1]: sshd@51-22-10.0.0.33:22-118.194.249.186:51944.service: Deactivated successfully. Sep 11 18:09:25.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-22-10.0.0.33:22-118.194.249.186:51944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:25.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4127-10.0.0.33:22-118.194.249.186:43154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:25.996332 systemd[1]: Started sshd@52-4127-10.0.0.33:22-118.194.249.186:43154.service - OpenSSH per-connection server daemon (118.194.249.186:43154). Sep 11 18:09:25.996637 systemd[1]: docker-849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0.scope: Deactivated successfully. Sep 11 18:09:26.013150 dockerd[2991]: time="2026-09-11T18:09:26.013108931Z" level=info msg="ignoring event" container=849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:26.014047 containerd[2527]: time="2026-09-11T18:09:26.013688243Z" level=info msg="shim disconnected" id=849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0 namespace=moby Sep 11 18:09:26.014047 containerd[2527]: time="2026-09-11T18:09:26.013720747Z" level=info msg="cleaning up after shim disconnected" id=849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0 namespace=moby Sep 11 18:09:26.014047 containerd[2527]: time="2026-09-11T18:09:26.013729563Z" level=info msg="cleaning up dead shim" id=849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0 namespace=moby Sep 11 18:09:26.055603 kernel: docker0: port 1(vethf05f676) entered disabled state Sep 11 18:09:26.055373 systemd-networkd[2304]: vethf05f676: Lost carrier Sep 11 18:09:26.055907 kernel: veth3073f41: renamed from eth0 Sep 11 18:09:26.077000 audit[9136]: NETFILTER_CFG table=raw:171 family=2 entries=1 op=nft_unregister_rule pid=9136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:26.077000 audit[9136]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc7bcf2620 a2=0 a3=0 items=0 ppid=2991 pid=9136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.077000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:26.087797 systemd-networkd[2304]: vethf05f676: Link DOWN Sep 11 18:09:26.089031 kernel: docker0: port 1(vethf05f676) entered disabled state Sep 11 18:09:26.092538 kernel: vethf05f676 (unregistering): left allmulticast mode Sep 11 18:09:26.092589 kernel: vethf05f676 (unregistering): left promiscuous mode Sep 11 18:09:26.086000 audit: ANOM_PROMISCUOUS dev=vethf05f676 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:26.093769 kernel: docker0: port 1(vethf05f676) entered disabled state Sep 11 18:09:26.086000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77ba0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.086000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:26.104386 systemd[1]: run-docker-netns-ffe081bbcaa5.mount: Deactivated successfully. Sep 11 18:09:26.113227 systemd[1]: var-lib-docker-rootfs-overlayfs-849ebbb6aa8f96f027286da73ee85d9a82c040b643fd0c7e9e2bb707e36e19a0.mount: Deactivated successfully. Sep 11 18:09:26.118000 audit: BPF prog-id=386 op=UNLOAD Sep 11 18:09:26.118000 audit: BPF prog-id=390 op=UNLOAD Sep 11 18:09:26.268434 systemd[1]: tmp-containerd\x2dmount1977235799.mount: Deactivated successfully. Sep 11 18:09:26.346569 containerd[2527]: time="2026-09-11T18:09:26.346524498Z" level=info msg="connecting to shim e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1" address="unix:///run/containerd/s/4458b99fa50e30e7d3ffd7d3c4a68ca36383111ab6431acd3978407a7c17a6d7" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:26.369160 systemd[1]: Started docker-e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1.scope - libcontainer container e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1. Sep 11 18:09:26.376000 audit: BPF prog-id=391 op=LOAD Sep 11 18:09:26.377000 audit: BPF prog-id=392 op=LOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1791b99b1fd8 a2=98 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.377000 audit: BPF prog-id=392 op=UNLOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.377000 audit: BPF prog-id=393 op=LOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1791b99b2290 a2=98 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.377000 audit: BPF prog-id=394 op=LOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1791b99b1fe8 a2=98 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.377000 audit: BPF prog-id=394 op=UNLOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.377000 audit: BPF prog-id=393 op=UNLOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.377000 audit: BPF prog-id=395 op=LOAD Sep 11 18:09:26.377000 audit[9165]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1791b99b24f0 a2=98 a3=0 items=0 ppid=9154 pid=9165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65373461326338643163636538643065616635313239666238 Sep 11 18:09:26.400168 kernel: docker0: port 1(veth6387c9d) entered blocking state Sep 11 18:09:26.400230 kernel: docker0: port 1(veth6387c9d) entered disabled state Sep 11 18:09:26.400313 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:26.401400 kernel: veth6387c9d: entered allmulticast mode Sep 11 18:09:26.396000 audit: ANOM_PROMISCUOUS dev=veth6387c9d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:26.402406 kernel: veth6387c9d: entered promiscuous mode Sep 11 18:09:26.396000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812077dd0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.396000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:26.404000 audit[9185]: NETFILTER_CFG table=raw:172 family=2 entries=1 op=nft_register_rule pid=9185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:26.404000 audit[9185]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffedc547740 a2=0 a3=0 items=0 ppid=2991 pid=9185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:26.404000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:26.405423 systemd-networkd[2304]: veth6387c9d: Link UP Sep 11 18:09:26.415418 kernel: eth0: renamed from vethb2ed77b Sep 11 18:09:26.415480 kernel: docker0: port 1(veth6387c9d) entered blocking state Sep 11 18:09:26.415450 systemd-networkd[2304]: veth6387c9d: Gained carrier Sep 11 18:09:26.415557 kernel: docker0: port 1(veth6387c9d) entered forwarding state Sep 11 18:09:26.415676 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:26.424160 dockerd[2991]: time="2026-09-11T18:09:26.424129027Z" level=info msg="sbJoin: gwep4 ''->'91f7b6b5f2c6', gwep6 ''->''" eid=91f7b6b5f2c6 ep=objective_payne net=bridge nid=ad3b593e9776 Sep 11 18:09:26.929430 sshd[9112]: Connection closed by authenticating user root 118.194.249.186 port 43154 [preauth] Sep 11 18:09:26.928000 audit[9112]: AUDIT1109 pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:26.931102 systemd[1]: sshd@52-4127-10.0.0.33:22-118.194.249.186:43154.service: Deactivated successfully. Sep 11 18:09:26.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-4127-10.0.0.33:22-118.194.249.186:43154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:27.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-23-10.0.0.33:22-118.194.249.186:59820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:27.173294 systemd[1]: Started sshd@53-23-10.0.0.33:22-118.194.249.186:59820.service - OpenSSH per-connection server daemon (118.194.249.186:59820). Sep 11 18:09:27.449700 systemd[1]: docker-e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1.scope: Deactivated successfully. Sep 11 18:09:27.462254 dockerd[2991]: time="2026-09-11T18:09:27.462219470Z" level=info msg="ignoring event" container=e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:27.462549 containerd[2527]: time="2026-09-11T18:09:27.462371482Z" level=info msg="shim disconnected" id=e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1 namespace=moby Sep 11 18:09:27.462549 containerd[2527]: time="2026-09-11T18:09:27.462400429Z" level=info msg="cleaning up after shim disconnected" id=e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1 namespace=moby Sep 11 18:09:27.462549 containerd[2527]: time="2026-09-11T18:09:27.462408364Z" level=info msg="cleaning up dead shim" id=e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1 namespace=moby Sep 11 18:09:27.485226 systemd-networkd[2304]: veth6387c9d: Lost carrier Sep 11 18:09:27.486670 kernel: docker0: port 1(veth6387c9d) entered disabled state Sep 11 18:09:27.486694 kernel: vethb2ed77b: renamed from eth0 Sep 11 18:09:27.499000 audit[9222]: NETFILTER_CFG table=raw:173 family=2 entries=1 op=nft_unregister_rule pid=9222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:27.499000 audit[9222]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff3f3228f0 a2=0 a3=0 items=0 ppid=2991 pid=9222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.499000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:27.505731 systemd-networkd[2304]: veth6387c9d: Link DOWN Sep 11 18:09:27.508560 kernel: docker0: port 1(veth6387c9d) entered disabled state Sep 11 18:09:27.508609 kernel: veth6387c9d (unregistering): left allmulticast mode Sep 11 18:09:27.510025 kernel: veth6387c9d (unregistering): left promiscuous mode Sep 11 18:09:27.504000 audit: ANOM_PROMISCUOUS dev=veth6387c9d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:27.511207 kernel: docker0: port 1(veth6387c9d) entered disabled state Sep 11 18:09:27.504000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f960 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.504000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:27.522404 systemd[1]: run-docker-netns-17e6f32d5501.mount: Deactivated successfully. Sep 11 18:09:27.527401 systemd[1]: var-lib-docker-rootfs-overlayfs-e74a2c8d1cce8d0eaf5129fb856a9b7f3e1310a88ce50bda26fb29cd223de6e1.mount: Deactivated successfully. Sep 11 18:09:27.530000 audit: BPF prog-id=391 op=UNLOAD Sep 11 18:09:27.530000 audit: BPF prog-id=395 op=UNLOAD Sep 11 18:09:27.665464 systemd[1]: tmp-containerd\x2dmount4117734482.mount: Deactivated successfully. Sep 11 18:09:27.736327 containerd[2527]: time="2026-09-11T18:09:27.735419861Z" level=info msg="connecting to shim a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520" address="unix:///run/containerd/s/7013139dbccea11c9c587c8bf18274b259ba09a709f738b003fd306631e2ca86" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:27.758203 systemd[1]: Started docker-a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520.scope - libcontainer container a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520. Sep 11 18:09:27.766000 audit: BPF prog-id=396 op=LOAD Sep 11 18:09:27.767000 audit: BPF prog-id=397 op=LOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=287f9e35bfd8 a2=98 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.767000 audit: BPF prog-id=397 op=UNLOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.767000 audit: BPF prog-id=398 op=LOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=287f9e35c290 a2=98 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.767000 audit: BPF prog-id=399 op=LOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=287f9e35bfe8 a2=98 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.767000 audit: BPF prog-id=399 op=UNLOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.767000 audit: BPF prog-id=398 op=UNLOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.767000 audit: BPF prog-id=400 op=LOAD Sep 11 18:09:27.767000 audit[9250]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=287f9e35c4f0 a2=98 a3=0 items=0 ppid=9239 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61343633626339343238333833376533353739393835646436 Sep 11 18:09:27.789596 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:27.792707 kernel: docker0: port 1(veth5f3e4ad) entered blocking state Sep 11 18:09:27.792791 kernel: docker0: port 1(veth5f3e4ad) entered disabled state Sep 11 18:09:27.792858 kernel: veth5f3e4ad: entered allmulticast mode Sep 11 18:09:27.792874 kernel: veth5f3e4ad: entered promiscuous mode Sep 11 18:09:27.788000 audit: ANOM_PROMISCUOUS dev=veth5f3e4ad prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:27.788000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155ec30 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.788000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:27.794000 audit[9270]: NETFILTER_CFG table=raw:174 family=2 entries=1 op=nft_register_rule pid=9270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:27.794000 audit[9270]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff504c3990 a2=0 a3=0 items=0 ppid=2991 pid=9270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:27.794000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:27.795929 systemd-networkd[2304]: veth5f3e4ad: Link UP Sep 11 18:09:27.805962 kernel: eth0: renamed from vethdc0eb24 Sep 11 18:09:27.806133 kernel: docker0: port 1(veth5f3e4ad) entered blocking state Sep 11 18:09:27.806077 systemd-networkd[2304]: veth5f3e4ad: Gained carrier Sep 11 18:09:27.806217 kernel: docker0: port 1(veth5f3e4ad) entered forwarding state Sep 11 18:09:27.806575 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:27.835631 dockerd[2991]: time="2026-09-11T18:09:27.835604305Z" level=info msg="sbJoin: gwep4 ''->'6838b2c7945b', gwep6 ''->''" eid=6838b2c7945b ep=zealous_brahmagupta net=bridge nid=ad3b593e9776 Sep 11 18:09:28.122987 sshd[9197]: Connection closed by authenticating user root 118.194.249.186 port 59820 [preauth] Sep 11 18:09:28.122000 audit[9197]: AUDIT1109 pid=9197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:28.124569 systemd[1]: sshd@53-23-10.0.0.33:22-118.194.249.186:59820.service: Deactivated successfully. Sep 11 18:09:28.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-23-10.0.0.33:22-118.194.249.186:59820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:28.355536 systemd[1]: Started sshd@54-24-10.0.0.33:22-118.194.249.186:49706.service - OpenSSH per-connection server daemon (118.194.249.186:49706). Sep 11 18:09:28.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-24-10.0.0.33:22-118.194.249.186:49706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:28.879461 systemd[1]: docker-a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520.scope: Deactivated successfully. Sep 11 18:09:28.893631 dockerd[2991]: time="2026-09-11T18:09:28.893576133Z" level=info msg="ignoring event" container=a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:28.894114 containerd[2527]: time="2026-09-11T18:09:28.894075535Z" level=info msg="shim disconnected" id=a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520 namespace=moby Sep 11 18:09:28.894596 containerd[2527]: time="2026-09-11T18:09:28.894350047Z" level=info msg="cleaning up after shim disconnected" id=a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520 namespace=moby Sep 11 18:09:28.894596 containerd[2527]: time="2026-09-11T18:09:28.894365116Z" level=info msg="cleaning up dead shim" id=a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520 namespace=moby Sep 11 18:09:28.923477 systemd-networkd[2304]: veth5f3e4ad: Lost carrier Sep 11 18:09:28.924025 kernel: docker0: port 1(veth5f3e4ad) entered disabled state Sep 11 18:09:28.924060 kernel: vethdc0eb24: renamed from eth0 Sep 11 18:09:28.943000 audit[9308]: NETFILTER_CFG table=raw:175 family=2 entries=1 op=nft_unregister_rule pid=9308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:28.943000 audit[9308]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fffdefd8470 a2=0 a3=0 items=0 ppid=2991 pid=9308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:28.943000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:28.954689 systemd-networkd[2304]: veth5f3e4ad: Link DOWN Sep 11 18:09:28.956022 kernel: docker0: port 1(veth5f3e4ad) entered disabled state Sep 11 18:09:28.958158 kernel: veth5f3e4ad (unregistering): left allmulticast mode Sep 11 18:09:28.958215 kernel: veth5f3e4ad (unregistering): left promiscuous mode Sep 11 18:09:28.958244 kernel: docker0: port 1(veth5f3e4ad) entered disabled state Sep 11 18:09:28.953000 audit: ANOM_PROMISCUOUS dev=veth5f3e4ad prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:28.953000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffec80 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:28.953000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:28.980916 systemd[1]: run-docker-netns-d8c6859703bd.mount: Deactivated successfully. Sep 11 18:09:28.984694 systemd[1]: var-lib-docker-rootfs-overlayfs-a463bc94283837e3579985dd60c19a905d340f1ea8d6e4b2d6bbda3617937520.mount: Deactivated successfully. Sep 11 18:09:28.993000 audit: BPF prog-id=396 op=UNLOAD Sep 11 18:09:28.993000 audit: BPF prog-id=400 op=UNLOAD Sep 11 18:09:29.129831 systemd[1]: tmp-containerd\x2dmount2603116261.mount: Deactivated successfully. Sep 11 18:09:29.240566 containerd[2527]: time="2026-09-11T18:09:29.240510460Z" level=info msg="connecting to shim 4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406" address="unix:///run/containerd/s/eb00580da80a28a0d735fe14e939fa3557fbc0a17cb3f5dc38ae880bdcb42ada" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:29.265211 systemd[1]: Started docker-4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406.scope - libcontainer container 4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406. Sep 11 18:09:29.273000 audit: BPF prog-id=401 op=LOAD Sep 11 18:09:29.273000 audit: BPF prog-id=402 op=LOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2d94b2f31fd8 a2=98 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.273000 audit: BPF prog-id=402 op=UNLOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.273000 audit: BPF prog-id=403 op=LOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2d94b2f32290 a2=98 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.273000 audit: BPF prog-id=404 op=LOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2d94b2f31fe8 a2=98 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.273000 audit: BPF prog-id=404 op=UNLOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.273000 audit: BPF prog-id=403 op=UNLOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.273000 audit: BPF prog-id=405 op=LOAD Sep 11 18:09:29.273000 audit[9336]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2d94b2f324f0 a2=98 a3=0 items=0 ppid=9325 pid=9336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663439353261376234323631646235313365386161353537 Sep 11 18:09:29.284000 audit[9282]: AUDIT1109 pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:29.285983 systemd[1]: sshd@54-24-10.0.0.33:22-118.194.249.186:49706.service: Deactivated successfully. Sep 11 18:09:29.287182 sshd[9282]: Connection closed by authenticating user root 118.194.249.186 port 49706 [preauth] Sep 11 18:09:29.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-24-10.0.0.33:22-118.194.249.186:49706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:29.297538 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:29.298790 kernel: docker0: port 1(vethc9beacc) entered blocking state Sep 11 18:09:29.298829 kernel: docker0: port 1(vethc9beacc) entered disabled state Sep 11 18:09:29.299637 kernel: vethc9beacc: entered allmulticast mode Sep 11 18:09:29.295000 audit: ANOM_PROMISCUOUS dev=vethc9beacc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:29.300557 kernel: vethc9beacc: entered promiscuous mode Sep 11 18:09:29.295000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8111ce9c0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.295000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:29.301000 audit[9360]: NETFILTER_CFG table=raw:176 family=2 entries=1 op=nft_register_rule pid=9360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:29.301000 audit[9360]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd633e62c0 a2=0 a3=0 items=0 ppid=2991 pid=9360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:29.301000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:29.304556 systemd-networkd[2304]: vethc9beacc: Link UP Sep 11 18:09:29.311027 kernel: eth0: renamed from vethb7fe7b0 Sep 11 18:09:29.312806 systemd-networkd[2304]: vethc9beacc: Gained carrier Sep 11 18:09:29.313029 kernel: docker0: port 1(vethc9beacc) entered blocking state Sep 11 18:09:29.313067 kernel: docker0: port 1(vethc9beacc) entered forwarding state Sep 11 18:09:29.313252 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:29.324031 dockerd[2991]: time="2026-09-11T18:09:29.323034303Z" level=info msg="sbJoin: gwep4 ''->'c7986afb3c27', gwep6 ''->''" eid=c7986afb3c27 ep=confident_liskov net=bridge nid=ad3b593e9776 Sep 11 18:09:29.517227 systemd[1]: Started sshd@55-25-10.0.0.33:22-118.194.249.186:37440.service - OpenSSH per-connection server daemon (118.194.249.186:37440). Sep 11 18:09:29.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-25-10.0.0.33:22-118.194.249.186:37440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:30.347325 systemd[1]: docker-4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406.scope: Deactivated successfully. Sep 11 18:09:30.359474 containerd[2527]: time="2026-09-11T18:09:30.359441120Z" level=info msg="shim disconnected" id=4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406 namespace=moby Sep 11 18:09:30.360143 containerd[2527]: time="2026-09-11T18:09:30.359993659Z" level=info msg="cleaning up after shim disconnected" id=4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406 namespace=moby Sep 11 18:09:30.360143 containerd[2527]: time="2026-09-11T18:09:30.360038330Z" level=info msg="cleaning up dead shim" id=4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406 namespace=moby Sep 11 18:09:30.360246 dockerd[2991]: time="2026-09-11T18:09:30.360076693Z" level=info msg="ignoring event" container=4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:30.383560 systemd-networkd[2304]: vethc9beacc: Lost carrier Sep 11 18:09:30.384309 kernel: docker0: port 1(vethc9beacc) entered disabled state Sep 11 18:09:30.384339 kernel: vethb7fe7b0: renamed from eth0 Sep 11 18:09:30.401000 audit[9395]: NETFILTER_CFG table=raw:177 family=2 entries=1 op=nft_unregister_rule pid=9395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:30.404397 kernel: kauditd_printk_skb: 149 callbacks suppressed Sep 11 18:09:30.404461 kernel: audit: type=1325 audit(1789150170.401:1470): table=raw:177 family=2 entries=1 op=nft_unregister_rule pid=9395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:30.401000 audit[9395]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffef6e5af90 a2=0 a3=0 items=0 ppid=2991 pid=9395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.408028 kernel: audit: type=1300 audit(1789150170.401:1470): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffef6e5af90 a2=0 a3=0 items=0 ppid=2991 pid=9395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.401000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:30.410829 kernel: audit: type=1327 audit(1789150170.401:1470): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:30.417395 systemd-networkd[2304]: vethc9beacc: Link DOWN Sep 11 18:09:30.419025 kernel: docker0: port 1(vethc9beacc) entered disabled state Sep 11 18:09:30.421389 kernel: vethc9beacc (unregistering): left allmulticast mode Sep 11 18:09:30.421619 kernel: vethc9beacc (unregistering): left promiscuous mode Sep 11 18:09:30.421908 kernel: docker0: port 1(vethc9beacc) entered disabled state Sep 11 18:09:30.416000 audit: ANOM_PROMISCUOUS dev=vethc9beacc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:30.424101 kernel: audit: type=1700 audit(1789150170.416:1471): dev=vethc9beacc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:30.416000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067e40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.416000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:30.435521 kernel: audit: type=1300 audit(1789150170.416:1471): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067e40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.435580 kernel: audit: type=1327 audit(1789150170.416:1471): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:30.435825 systemd[1]: run-docker-netns-81074d5f58a7.mount: Deactivated successfully. Sep 11 18:09:30.439631 systemd[1]: var-lib-docker-rootfs-overlayfs-4f4952a7b4261db513e8aa557e50842c49ba73405ef53dca0a2f530476f0a406.mount: Deactivated successfully. Sep 11 18:09:30.444748 sshd[9369]: Connection closed by authenticating user root 118.194.249.186 port 37440 [preauth] Sep 11 18:09:30.443000 audit[9369]: AUDIT1109 pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:30.447460 systemd[1]: sshd@55-25-10.0.0.33:22-118.194.249.186:37440.service: Deactivated successfully. Sep 11 18:09:30.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-25-10.0.0.33:22-118.194.249.186:37440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:30.452232 kernel: audit: type=1109 audit(1789150170.443:1472): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:30.452265 kernel: audit: type=1131 audit(1789150170.446:1473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-25-10.0.0.33:22-118.194.249.186:37440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:30.457000 audit: BPF prog-id=401 op=UNLOAD Sep 11 18:09:30.457000 audit: BPF prog-id=405 op=UNLOAD Sep 11 18:09:30.460047 kernel: audit: type=1334 audit(1789150170.457:1474): prog-id=401 op=UNLOAD Sep 11 18:09:30.460086 kernel: audit: type=1334 audit(1789150170.457:1475): prog-id=405 op=UNLOAD Sep 11 18:09:30.677947 systemd[1]: Started sshd@56-26-10.0.0.33:22-118.194.249.186:51400.service - OpenSSH per-connection server daemon (118.194.249.186:51400). Sep 11 18:09:30.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-26-10.0.0.33:22-118.194.249.186:51400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:30.720031 containerd[2527]: time="2026-09-11T18:09:30.719980771Z" level=info msg="connecting to shim cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6" address="unix:///run/containerd/s/ad89a483995c3d99623aebe83e51950c7b34fe63f1928b96ae38698c02959e37" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:30.741370 systemd[1]: Started docker-cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6.scope - libcontainer container cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6. Sep 11 18:09:30.749000 audit: BPF prog-id=406 op=LOAD Sep 11 18:09:30.749000 audit: BPF prog-id=407 op=LOAD Sep 11 18:09:30.749000 audit[9429]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=25a16bc75fd8 a2=98 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.749000 audit: BPF prog-id=407 op=UNLOAD Sep 11 18:09:30.749000 audit[9429]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.749000 audit: BPF prog-id=408 op=LOAD Sep 11 18:09:30.749000 audit[9429]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=25a16bc76290 a2=98 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.750000 audit: BPF prog-id=409 op=LOAD Sep 11 18:09:30.750000 audit[9429]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=25a16bc75fe8 a2=98 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.750000 audit: BPF prog-id=409 op=UNLOAD Sep 11 18:09:30.750000 audit[9429]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.750000 audit: BPF prog-id=408 op=UNLOAD Sep 11 18:09:30.750000 audit[9429]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.750000 audit: BPF prog-id=410 op=LOAD Sep 11 18:09:30.750000 audit[9429]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=25a16bc764f0 a2=98 a3=0 items=0 ppid=9419 pid=9429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623232343137383363653838313033643038376439326639 Sep 11 18:09:30.772964 kernel: docker0: port 1(veth8a30578) entered blocking state Sep 11 18:09:30.773044 kernel: docker0: port 1(veth8a30578) entered disabled state Sep 11 18:09:30.773290 kernel: veth8a30578: entered allmulticast mode Sep 11 18:09:30.774320 kernel: veth8a30578: entered promiscuous mode Sep 11 18:09:30.769000 audit: ANOM_PROMISCUOUS dev=veth8a30578 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:30.769000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b66150 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.769000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:30.775821 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:30.776000 audit[9451]: NETFILTER_CFG table=raw:178 family=2 entries=1 op=nft_register_rule pid=9451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:30.776000 audit[9451]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe03833320 a2=0 a3=0 items=0 ppid=2991 pid=9451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:30.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:30.778493 systemd-networkd[2304]: veth8a30578: Link UP Sep 11 18:09:30.805896 kernel: eth0: renamed from vethdf2ea2c Sep 11 18:09:30.805946 kernel: docker0: port 1(veth8a30578) entered blocking state Sep 11 18:09:30.805964 kernel: docker0: port 1(veth8a30578) entered forwarding state Sep 11 18:09:30.806040 systemd-networkd[2304]: veth8a30578: Gained carrier Sep 11 18:09:30.806200 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:30.814013 dockerd[2991]: time="2026-09-11T18:09:30.813983724Z" level=info msg="sbJoin: gwep4 ''->'d18544a768c4', gwep6 ''->''" eid=d18544a768c4 ep=gifted_bhaskara net=bridge nid=ad3b593e9776 Sep 11 18:09:31.599485 sshd[9407]: Connection closed by authenticating user root 118.194.249.186 port 51400 [preauth] Sep 11 18:09:31.598000 audit[9407]: AUDIT1109 pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:31.600968 systemd[1]: sshd@56-26-10.0.0.33:22-118.194.249.186:51400.service: Deactivated successfully. Sep 11 18:09:31.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-26-10.0.0.33:22-118.194.249.186:51400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:31.845755 systemd[1]: docker-cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6.scope: Deactivated successfully. Sep 11 18:09:31.849110 systemd[1]: Started sshd@57-27-10.0.0.33:22-118.194.249.186:38802.service - OpenSSH per-connection server daemon (118.194.249.186:38802). Sep 11 18:09:31.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-27-10.0.0.33:22-118.194.249.186:38802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:31.853952 dockerd[2991]: time="2026-09-11T18:09:31.853674391Z" level=info msg="ignoring event" container=cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:31.854408 containerd[2527]: time="2026-09-11T18:09:31.853843828Z" level=info msg="shim disconnected" id=cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6 namespace=moby Sep 11 18:09:31.854408 containerd[2527]: time="2026-09-11T18:09:31.853874930Z" level=info msg="cleaning up after shim disconnected" id=cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6 namespace=moby Sep 11 18:09:31.854408 containerd[2527]: time="2026-09-11T18:09:31.853882646Z" level=info msg="cleaning up dead shim" id=cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6 namespace=moby Sep 11 18:09:31.884402 systemd-networkd[2304]: veth8a30578: Lost carrier Sep 11 18:09:31.885689 kernel: docker0: port 1(veth8a30578) entered disabled state Sep 11 18:09:31.885718 kernel: vethdf2ea2c: renamed from eth0 Sep 11 18:09:31.900000 audit[9488]: NETFILTER_CFG table=raw:179 family=2 entries=1 op=nft_unregister_rule pid=9488 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:31.900000 audit[9488]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc517e2860 a2=0 a3=0 items=0 ppid=2991 pid=9488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:31.900000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:31.904726 systemd-networkd[2304]: veth8a30578: Link DOWN Sep 11 18:09:31.906018 kernel: docker0: port 1(veth8a30578) entered disabled state Sep 11 18:09:31.908240 kernel: veth8a30578 (unregistering): left allmulticast mode Sep 11 18:09:31.908295 kernel: veth8a30578 (unregistering): left promiscuous mode Sep 11 18:09:31.909250 kernel: docker0: port 1(veth8a30578) entered disabled state Sep 11 18:09:31.903000 audit: ANOM_PROMISCUOUS dev=veth8a30578 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:31.903000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8ad00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:31.903000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:31.922811 systemd[1]: run-docker-netns-71d502dd4773.mount: Deactivated successfully. Sep 11 18:09:31.927250 systemd[1]: var-lib-docker-rootfs-overlayfs-cb2241783ce88103d087d92f9f477db78de12fdb90513a91c31185d7c8aa2ca6.mount: Deactivated successfully. Sep 11 18:09:31.933000 audit: BPF prog-id=406 op=UNLOAD Sep 11 18:09:31.933000 audit: BPF prog-id=410 op=UNLOAD Sep 11 18:09:32.070052 systemd[1]: tmp-containerd\x2dmount2087812446.mount: Deactivated successfully. Sep 11 18:09:32.148132 containerd[2527]: time="2026-09-11T18:09:32.148092017Z" level=info msg="connecting to shim 9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d" address="unix:///run/containerd/s/5188c7b7390e9fad6ac65d9c1f19bf6df51985fa424223a679731188e718acf8" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:32.170204 systemd[1]: Started docker-9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d.scope - libcontainer container 9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d. Sep 11 18:09:32.178000 audit: BPF prog-id=411 op=LOAD Sep 11 18:09:32.178000 audit: BPF prog-id=412 op=LOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1a233038dfd8 a2=98 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.178000 audit: BPF prog-id=412 op=UNLOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.178000 audit: BPF prog-id=413 op=LOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1a233038e290 a2=98 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.178000 audit: BPF prog-id=414 op=LOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1a233038dfe8 a2=98 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.178000 audit: BPF prog-id=414 op=UNLOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.178000 audit: BPF prog-id=413 op=UNLOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.178000 audit: BPF prog-id=415 op=LOAD Sep 11 18:09:32.178000 audit[9518]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1a233038e4f0 a2=98 a3=0 items=0 ppid=9505 pid=9518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39313439636166643738386135633464393834666630363230 Sep 11 18:09:32.201387 kernel: docker0: port 1(vethda1ead4) entered blocking state Sep 11 18:09:32.201446 kernel: docker0: port 1(vethda1ead4) entered disabled state Sep 11 18:09:32.201857 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:32.202490 kernel: vethda1ead4: entered allmulticast mode Sep 11 18:09:32.198000 audit: ANOM_PROMISCUOUS dev=vethda1ead4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:32.198000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812077680 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:32.205013 kernel: vethda1ead4: entered promiscuous mode Sep 11 18:09:32.208000 audit[9542]: NETFILTER_CFG table=raw:180 family=2 entries=1 op=nft_register_rule pid=9542 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:32.208000 audit[9542]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff8e0a0310 a2=0 a3=0 items=0 ppid=2991 pid=9542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:32.208000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:32.209453 systemd-networkd[2304]: vethda1ead4: Link UP Sep 11 18:09:32.218016 kernel: eth0: renamed from veth83e8299 Sep 11 18:09:32.218071 kernel: docker0: port 1(vethda1ead4) entered blocking state Sep 11 18:09:32.219360 kernel: docker0: port 1(vethda1ead4) entered forwarding state Sep 11 18:09:32.219475 systemd-networkd[2304]: vethda1ead4: Gained carrier Sep 11 18:09:32.219655 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:32.227252 dockerd[2991]: time="2026-09-11T18:09:32.227226242Z" level=info msg="sbJoin: gwep4 ''->'0e93c80a95ea', gwep6 ''->''" eid=0e93c80a95ea ep=dreamy_shaw net=bridge nid=ad3b593e9776 Sep 11 18:09:32.802391 sshd[9469]: Connection closed by authenticating user root 118.194.249.186 port 38802 [preauth] Sep 11 18:09:32.802000 audit[9469]: AUDIT1109 pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:32.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-27-10.0.0.33:22-118.194.249.186:38802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:32.804198 systemd[1]: sshd@57-27-10.0.0.33:22-118.194.249.186:38802.service: Deactivated successfully. Sep 11 18:09:33.044334 systemd[1]: Started sshd@58-4128-10.0.0.33:22-118.194.249.186:56528.service - OpenSSH per-connection server daemon (118.194.249.186:56528). Sep 11 18:09:33.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-4128-10.0.0.33:22-118.194.249.186:56528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:33.255289 systemd[1]: docker-9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d.scope: Deactivated successfully. Sep 11 18:09:33.266846 containerd[2527]: time="2026-09-11T18:09:33.266813105Z" level=info msg="shim disconnected" id=9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d namespace=moby Sep 11 18:09:33.266846 containerd[2527]: time="2026-09-11T18:09:33.266845812Z" level=info msg="cleaning up after shim disconnected" id=9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d namespace=moby Sep 11 18:09:33.267183 containerd[2527]: time="2026-09-11T18:09:33.266854065Z" level=info msg="cleaning up dead shim" id=9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d namespace=moby Sep 11 18:09:33.267359 dockerd[2991]: time="2026-09-11T18:09:33.266835451Z" level=info msg="ignoring event" container=9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:33.289382 systemd-networkd[2304]: vethda1ead4: Lost carrier Sep 11 18:09:33.290150 kernel: docker0: port 1(vethda1ead4) entered disabled state Sep 11 18:09:33.290354 kernel: veth83e8299: renamed from eth0 Sep 11 18:09:33.308000 audit[9578]: NETFILTER_CFG table=raw:181 family=2 entries=1 op=nft_unregister_rule pid=9578 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:33.308000 audit[9578]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc3ee6bbb0 a2=0 a3=0 items=0 ppid=2991 pid=9578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.308000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:33.313397 systemd-networkd[2304]: vethda1ead4: Link DOWN Sep 11 18:09:33.315073 kernel: docker0: port 1(vethda1ead4) entered disabled state Sep 11 18:09:33.317630 kernel: vethda1ead4 (unregistering): left allmulticast mode Sep 11 18:09:33.317685 kernel: vethda1ead4 (unregistering): left promiscuous mode Sep 11 18:09:33.312000 audit: ANOM_PROMISCUOUS dev=vethda1ead4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:33.318760 kernel: docker0: port 1(vethda1ead4) entered disabled state Sep 11 18:09:33.312000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e080 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.312000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:33.330766 systemd[1]: run-docker-netns-5bfe58b74923.mount: Deactivated successfully. Sep 11 18:09:33.336342 systemd[1]: var-lib-docker-rootfs-overlayfs-9149cafd788a5c4d984ff06200f81e565c4fb8ff925bcee29d691ece6e71585d.mount: Deactivated successfully. Sep 11 18:09:33.343000 audit: BPF prog-id=411 op=UNLOAD Sep 11 18:09:33.343000 audit: BPF prog-id=415 op=UNLOAD Sep 11 18:09:33.544294 containerd[2527]: time="2026-09-11T18:09:33.544206687Z" level=info msg="connecting to shim 0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942" address="unix:///run/containerd/s/c8e48c7b6471b9a15f2a40adbbf60b8e0df9b92642e7bf063b4874378b33f860" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:33.562169 systemd[1]: Started docker-0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942.scope - libcontainer container 0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942. Sep 11 18:09:33.570000 audit: BPF prog-id=416 op=LOAD Sep 11 18:09:33.570000 audit: BPF prog-id=417 op=LOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e9ccb31fd8 a2=98 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.570000 audit: BPF prog-id=417 op=UNLOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.570000 audit: BPF prog-id=418 op=LOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e9ccb32290 a2=98 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.570000 audit: BPF prog-id=419 op=LOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1e9ccb31fe8 a2=98 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.570000 audit: BPF prog-id=419 op=UNLOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.570000 audit: BPF prog-id=418 op=UNLOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.570000 audit: BPF prog-id=420 op=LOAD Sep 11 18:09:33.570000 audit[9607]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e9ccb324f0 a2=98 a3=0 items=0 ppid=9595 pid=9607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30623833373565326332613862386634613031653136623164 Sep 11 18:09:33.590624 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:33.593289 kernel: docker0: port 1(veth07c7b70) entered blocking state Sep 11 18:09:33.593334 kernel: docker0: port 1(veth07c7b70) entered disabled state Sep 11 18:09:33.594038 kernel: veth07c7b70: entered allmulticast mode Sep 11 18:09:33.595047 kernel: veth07c7b70: entered promiscuous mode Sep 11 18:09:33.589000 audit: ANOM_PROMISCUOUS dev=veth07c7b70 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:33.589000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c88030 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.589000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:33.596000 audit[9627]: NETFILTER_CFG table=raw:182 family=2 entries=1 op=nft_register_rule pid=9627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:33.596000 audit[9627]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffca3109a70 a2=0 a3=0 items=0 ppid=2991 pid=9627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:33.596000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:33.597677 systemd-networkd[2304]: veth07c7b70: Link UP Sep 11 18:09:33.617022 kernel: eth0: renamed from veth54643a2 Sep 11 18:09:33.618846 kernel: docker0: port 1(veth07c7b70) entered blocking state Sep 11 18:09:33.618900 kernel: docker0: port 1(veth07c7b70) entered forwarding state Sep 11 18:09:33.619064 systemd-networkd[2304]: veth07c7b70: Gained carrier Sep 11 18:09:33.619357 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:33.629906 dockerd[2991]: time="2026-09-11T18:09:33.629877876Z" level=info msg="sbJoin: gwep4 ''->'5e375aed5736', gwep6 ''->''" eid=5e375aed5736 ep=nervous_yonath net=bridge nid=ad3b593e9776 Sep 11 18:09:33.990745 sshd[9553]: Connection closed by authenticating user root 118.194.249.186 port 56528 [preauth] Sep 11 18:09:33.990000 audit[9553]: AUDIT1109 pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:33.992489 systemd[1]: sshd@58-4128-10.0.0.33:22-118.194.249.186:56528.service: Deactivated successfully. Sep 11 18:09:33.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-4128-10.0.0.33:22-118.194.249.186:56528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:34.220137 systemd[1]: Started sshd@59-28-10.0.0.33:22-118.194.249.186:44234.service - OpenSSH per-connection server daemon (118.194.249.186:44234). Sep 11 18:09:34.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-28-10.0.0.33:22-118.194.249.186:44234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:34.659930 systemd[1]: docker-0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942.scope: Deactivated successfully. Sep 11 18:09:34.672166 containerd[2527]: time="2026-09-11T18:09:34.672124065Z" level=info msg="shim disconnected" id=0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942 namespace=moby Sep 11 18:09:34.672659 containerd[2527]: time="2026-09-11T18:09:34.672261300Z" level=info msg="cleaning up after shim disconnected" id=0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942 namespace=moby Sep 11 18:09:34.672659 containerd[2527]: time="2026-09-11T18:09:34.672342314Z" level=info msg="cleaning up dead shim" id=0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942 namespace=moby Sep 11 18:09:34.672728 dockerd[2991]: time="2026-09-11T18:09:34.672248044Z" level=info msg="ignoring event" container=0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:34.696474 kernel: docker0: port 1(veth07c7b70) entered disabled state Sep 11 18:09:34.696543 kernel: veth54643a2: renamed from eth0 Sep 11 18:09:34.696582 systemd-networkd[2304]: veth07c7b70: Lost carrier Sep 11 18:09:34.710000 audit[9667]: NETFILTER_CFG table=raw:183 family=2 entries=1 op=nft_unregister_rule pid=9667 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:34.710000 audit[9667]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdfa9a8570 a2=0 a3=0 items=0 ppid=2991 pid=9667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.710000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:34.720846 systemd-networkd[2304]: veth07c7b70: Link DOWN Sep 11 18:09:34.722021 kernel: docker0: port 1(veth07c7b70) entered disabled state Sep 11 18:09:34.719000 audit: ANOM_PROMISCUOUS dev=veth07c7b70 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:34.726136 kernel: veth07c7b70 (unregistering): left allmulticast mode Sep 11 18:09:34.726172 kernel: veth07c7b70 (unregistering): left promiscuous mode Sep 11 18:09:34.726190 kernel: docker0: port 1(veth07c7b70) entered disabled state Sep 11 18:09:34.719000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4fd00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.719000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:34.735068 systemd[1]: run-docker-netns-fe9225f81558.mount: Deactivated successfully. Sep 11 18:09:34.738161 systemd[1]: var-lib-docker-rootfs-overlayfs-0b8375e2c2a8b8f4a01e16b1d96c836eb09674548de8fc8185a2abda1ec90942.mount: Deactivated successfully. Sep 11 18:09:34.750000 audit: BPF prog-id=416 op=UNLOAD Sep 11 18:09:34.750000 audit: BPF prog-id=420 op=UNLOAD Sep 11 18:09:34.877036 systemd[1]: tmp-containerd\x2dmount3549579590.mount: Deactivated successfully. Sep 11 18:09:34.970658 containerd[2527]: time="2026-09-11T18:09:34.970392894Z" level=info msg="connecting to shim 588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde" address="unix:///run/containerd/s/daefe7e2395dccc4a30a970ca519302acd413d3ef82881fc1085e25236a8ff39" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:34.991186 systemd[1]: Started docker-588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde.scope - libcontainer container 588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde. Sep 11 18:09:34.999000 audit: BPF prog-id=421 op=LOAD Sep 11 18:09:34.999000 audit: BPF prog-id=422 op=LOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=13951238dfd8 a2=98 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:34.999000 audit: BPF prog-id=422 op=UNLOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:34.999000 audit: BPF prog-id=423 op=LOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=13951238e290 a2=98 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:34.999000 audit: BPF prog-id=424 op=LOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=13951238dfe8 a2=98 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:34.999000 audit: BPF prog-id=424 op=UNLOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:34.999000 audit: BPF prog-id=423 op=UNLOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:34.999000 audit: BPF prog-id=425 op=LOAD Sep 11 18:09:34.999000 audit[9694]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=13951238e4f0 a2=98 a3=0 items=0 ppid=9684 pid=9694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:34.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383835303965303863353739303431376435323937386261 Sep 11 18:09:35.024810 kernel: docker0: port 1(vethba05da2) entered blocking state Sep 11 18:09:35.024693 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:35.024955 kernel: docker0: port 1(vethba05da2) entered disabled state Sep 11 18:09:35.025836 kernel: vethba05da2: entered allmulticast mode Sep 11 18:09:35.020000 audit: ANOM_PROMISCUOUS dev=vethba05da2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:35.026960 kernel: vethba05da2: entered promiscuous mode Sep 11 18:09:35.020000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f89e90 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:35.020000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:35.028000 audit[9717]: NETFILTER_CFG table=raw:184 family=2 entries=1 op=nft_register_rule pid=9717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:35.028000 audit[9717]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdf724c8e0 a2=0 a3=0 items=0 ppid=2991 pid=9717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:35.028000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:35.030110 systemd-networkd[2304]: vethba05da2: Link UP Sep 11 18:09:35.044022 kernel: eth0: renamed from veth1762c3c Sep 11 18:09:35.046432 kernel: docker0: port 1(vethba05da2) entered blocking state Sep 11 18:09:35.046483 kernel: docker0: port 1(vethba05da2) entered forwarding state Sep 11 18:09:35.046716 systemd-networkd[2304]: vethba05da2: Gained carrier Sep 11 18:09:35.046964 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:35.055831 dockerd[2991]: time="2026-09-11T18:09:35.055807854Z" level=info msg="sbJoin: gwep4 ''->'2a114c613e37', gwep6 ''->''" eid=2a114c613e37 ep=sleepy_allen net=bridge nid=ad3b593e9776 Sep 11 18:09:35.148260 sshd[9641]: Connection closed by authenticating user root 118.194.249.186 port 44234 [preauth] Sep 11 18:09:35.147000 audit[9641]: AUDIT1109 pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:35.149944 systemd[1]: sshd@59-28-10.0.0.33:22-118.194.249.186:44234.service: Deactivated successfully. Sep 11 18:09:35.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-28-10.0.0.33:22-118.194.249.186:44234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:35.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-29-10.0.0.33:22-118.194.249.186:59764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:35.401740 systemd[1]: Started sshd@60-29-10.0.0.33:22-118.194.249.186:59764.service - OpenSSH per-connection server daemon (118.194.249.186:59764). Sep 11 18:09:36.081228 systemd[1]: docker-588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde.scope: Deactivated successfully. Sep 11 18:09:36.094587 dockerd[2991]: time="2026-09-11T18:09:36.094551407Z" level=info msg="ignoring event" container=588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:36.095176 containerd[2527]: time="2026-09-11T18:09:36.094907659Z" level=info msg="shim disconnected" id=588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde namespace=moby Sep 11 18:09:36.095176 containerd[2527]: time="2026-09-11T18:09:36.094940269Z" level=info msg="cleaning up after shim disconnected" id=588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde namespace=moby Sep 11 18:09:36.095176 containerd[2527]: time="2026-09-11T18:09:36.094949211Z" level=info msg="cleaning up dead shim" id=588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde namespace=moby Sep 11 18:09:36.117639 systemd-networkd[2304]: vethba05da2: Lost carrier Sep 11 18:09:36.118023 kernel: docker0: port 1(vethba05da2) entered disabled state Sep 11 18:09:36.119026 kernel: veth1762c3c: renamed from eth0 Sep 11 18:09:36.154000 audit[9752]: NETFILTER_CFG table=raw:185 family=2 entries=1 op=nft_unregister_rule pid=9752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:36.156536 kernel: kauditd_printk_skb: 149 callbacks suppressed Sep 11 18:09:36.156572 kernel: audit: type=1325 audit(1789150176.154:1541): table=raw:185 family=2 entries=1 op=nft_unregister_rule pid=9752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:36.154000 audit[9752]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff5bc972f0 a2=0 a3=0 items=0 ppid=2991 pid=9752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.162054 kernel: audit: type=1300 audit(1789150176.154:1541): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff5bc972f0 a2=0 a3=0 items=0 ppid=2991 pid=9752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.154000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:36.164719 kernel: audit: type=1327 audit(1789150176.154:1541): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:36.170795 systemd-networkd[2304]: vethba05da2: Link DOWN Sep 11 18:09:36.172023 kernel: docker0: port 1(vethba05da2) entered disabled state Sep 11 18:09:36.174714 kernel: vethba05da2 (unregistering): left allmulticast mode Sep 11 18:09:36.174769 kernel: vethba05da2 (unregistering): left promiscuous mode Sep 11 18:09:36.169000 audit: ANOM_PROMISCUOUS dev=vethba05da2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:36.177051 kernel: docker0: port 1(vethba05da2) entered disabled state Sep 11 18:09:36.177083 kernel: audit: type=1700 audit(1789150176.169:1542): dev=vethba05da2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:36.169000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811066240 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.169000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:36.195068 kernel: audit: type=1300 audit(1789150176.169:1542): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811066240 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.195117 kernel: audit: type=1327 audit(1789150176.169:1542): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:36.196297 systemd[1]: run-docker-netns-660f8aad0dab.mount: Deactivated successfully. Sep 11 18:09:36.200556 systemd[1]: var-lib-docker-rootfs-overlayfs-588509e08c5790417d52978ba395462dcbe171e02e68a6acae17b3b0dda6cbde.mount: Deactivated successfully. Sep 11 18:09:36.208000 audit: BPF prog-id=421 op=UNLOAD Sep 11 18:09:36.208000 audit: BPF prog-id=425 op=UNLOAD Sep 11 18:09:36.211054 kernel: audit: type=1334 audit(1789150176.208:1543): prog-id=421 op=UNLOAD Sep 11 18:09:36.211096 kernel: audit: type=1334 audit(1789150176.208:1544): prog-id=425 op=UNLOAD Sep 11 18:09:36.351469 sshd[9727]: Connection closed by authenticating user root 118.194.249.186 port 59764 [preauth] Sep 11 18:09:36.351438 systemd[1]: tmp-containerd\x2dmount2287280596.mount: Deactivated successfully. Sep 11 18:09:36.349000 audit[9727]: AUDIT1109 pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:36.353690 systemd[1]: sshd@60-29-10.0.0.33:22-118.194.249.186:59764.service: Deactivated successfully. Sep 11 18:09:36.357042 kernel: audit: type=1109 audit(1789150176.349:1545): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:36.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-29-10.0.0.33:22-118.194.249.186:59764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:36.360018 kernel: audit: type=1131 audit(1789150176.351:1546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-29-10.0.0.33:22-118.194.249.186:59764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:36.473364 containerd[2527]: time="2026-09-11T18:09:36.473323833Z" level=info msg="connecting to shim 527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40" address="unix:///run/containerd/s/94f6a7c0a190af7400c652e3c3196056c4c5d819c2c888f734e6492dd317f295" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:36.492197 systemd[1]: Started docker-527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40.scope - libcontainer container 527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40. Sep 11 18:09:36.500000 audit: BPF prog-id=426 op=LOAD Sep 11 18:09:36.500000 audit: BPF prog-id=427 op=LOAD Sep 11 18:09:36.500000 audit[9782]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1805703a7fd8 a2=98 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.500000 audit: BPF prog-id=427 op=UNLOAD Sep 11 18:09:36.500000 audit[9782]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.500000 audit: BPF prog-id=428 op=LOAD Sep 11 18:09:36.500000 audit[9782]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1805703a8290 a2=98 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.500000 audit: BPF prog-id=429 op=LOAD Sep 11 18:09:36.500000 audit[9782]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1805703a7fe8 a2=98 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.501000 audit: BPF prog-id=429 op=UNLOAD Sep 11 18:09:36.501000 audit[9782]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.501000 audit: BPF prog-id=428 op=UNLOAD Sep 11 18:09:36.501000 audit[9782]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.501000 audit: BPF prog-id=430 op=LOAD Sep 11 18:09:36.501000 audit[9782]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1805703a84f0 a2=98 a3=0 items=0 ppid=9771 pid=9782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35323765313362336239396466626435663530353063656463 Sep 11 18:09:36.522854 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:36.526060 kernel: docker0: port 1(veth601a99b) entered blocking state Sep 11 18:09:36.526123 kernel: docker0: port 1(veth601a99b) entered disabled state Sep 11 18:09:36.529614 kernel: veth601a99b: entered allmulticast mode Sep 11 18:09:36.529664 kernel: veth601a99b: entered promiscuous mode Sep 11 18:09:36.522000 audit: ANOM_PROMISCUOUS dev=veth601a99b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:36.522000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811776900 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:36.531000 audit[9803]: NETFILTER_CFG table=raw:186 family=2 entries=1 op=nft_register_rule pid=9803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:36.531000 audit[9803]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdea398e20 a2=0 a3=0 items=0 ppid=2991 pid=9803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:36.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:36.532471 systemd-networkd[2304]: veth601a99b: Link UP Sep 11 18:09:36.540661 kernel: eth0: renamed from veth09b4291 Sep 11 18:09:36.540733 kernel: docker0: port 1(veth601a99b) entered blocking state Sep 11 18:09:36.541629 kernel: docker0: port 1(veth601a99b) entered forwarding state Sep 11 18:09:36.542129 systemd-networkd[2304]: veth601a99b: Gained carrier Sep 11 18:09:36.542656 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:36.551462 dockerd[2991]: time="2026-09-11T18:09:36.551434743Z" level=info msg="sbJoin: gwep4 ''->'8c4ce955f9e0', gwep6 ''->''" eid=8c4ce955f9e0 ep=crazy_cerf net=bridge nid=ad3b593e9776 Sep 11 18:09:36.582337 systemd[1]: Started sshd@61-30-10.0.0.33:22-118.194.249.186:42536.service - OpenSSH per-connection server daemon (118.194.249.186:42536). Sep 11 18:09:36.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-30-10.0.0.33:22-118.194.249.186:42536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:37.505534 sshd[9811]: Connection closed by authenticating user root 118.194.249.186 port 42536 [preauth] Sep 11 18:09:37.505000 audit[9811]: AUDIT1109 pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:37.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-30-10.0.0.33:22-118.194.249.186:42536 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:37.507254 systemd[1]: sshd@61-30-10.0.0.33:22-118.194.249.186:42536.service: Deactivated successfully. Sep 11 18:09:37.587495 systemd[1]: docker-527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40.scope: Deactivated successfully. Sep 11 18:09:37.599356 dockerd[2991]: time="2026-09-11T18:09:37.599221437Z" level=info msg="ignoring event" container=527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:37.599954 containerd[2527]: time="2026-09-11T18:09:37.599915043Z" level=info msg="shim disconnected" id=527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40 namespace=moby Sep 11 18:09:37.599954 containerd[2527]: time="2026-09-11T18:09:37.599948933Z" level=info msg="cleaning up after shim disconnected" id=527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40 namespace=moby Sep 11 18:09:37.600230 containerd[2527]: time="2026-09-11T18:09:37.599959076Z" level=info msg="cleaning up dead shim" id=527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40 namespace=moby Sep 11 18:09:37.623725 systemd-networkd[2304]: veth601a99b: Lost carrier Sep 11 18:09:37.625225 kernel: docker0: port 1(veth601a99b) entered disabled state Sep 11 18:09:37.625248 kernel: veth09b4291: renamed from eth0 Sep 11 18:09:37.649000 audit[9840]: NETFILTER_CFG table=raw:187 family=2 entries=1 op=nft_unregister_rule pid=9840 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:37.649000 audit[9840]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe4ce74f60 a2=0 a3=0 items=0 ppid=2991 pid=9840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.649000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:37.657802 systemd-networkd[2304]: veth601a99b: Link DOWN Sep 11 18:09:37.659028 kernel: docker0: port 1(veth601a99b) entered disabled state Sep 11 18:09:37.657000 audit: ANOM_PROMISCUOUS dev=veth601a99b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:37.663110 kernel: veth601a99b (unregistering): left allmulticast mode Sep 11 18:09:37.663138 kernel: veth601a99b (unregistering): left promiscuous mode Sep 11 18:09:37.663157 kernel: docker0: port 1(veth601a99b) entered disabled state Sep 11 18:09:37.657000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067bc0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.657000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:37.677016 systemd[1]: run-docker-netns-c0cc6bdd6f73.mount: Deactivated successfully. Sep 11 18:09:37.681727 systemd[1]: var-lib-docker-rootfs-overlayfs-527e13b3b99dfbd5f5050cedc1870f3079d3a73423e755faf211a9bbe2b24a40.mount: Deactivated successfully. Sep 11 18:09:37.690000 audit: BPF prog-id=426 op=UNLOAD Sep 11 18:09:37.690000 audit: BPF prog-id=430 op=UNLOAD Sep 11 18:09:37.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-4129-10.0.0.33:22-118.194.249.186:57744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:37.749859 systemd[1]: Started sshd@62-4129-10.0.0.33:22-118.194.249.186:57744.service - OpenSSH per-connection server daemon (118.194.249.186:57744). Sep 11 18:09:37.822239 systemd[1]: tmp-containerd\x2dmount3505294759.mount: Deactivated successfully. Sep 11 18:09:37.899228 containerd[2527]: time="2026-09-11T18:09:37.899165230Z" level=info msg="connecting to shim a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636" address="unix:///run/containerd/s/740fbf950abd84c3b06027beacc78c33453211f3a6510653cf2242734a795658" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:37.918177 systemd[1]: Started docker-a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636.scope - libcontainer container a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636. Sep 11 18:09:37.925000 audit: BPF prog-id=431 op=LOAD Sep 11 18:09:37.926000 audit: BPF prog-id=432 op=LOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fe25399ffd8 a2=98 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.926000 audit: BPF prog-id=432 op=UNLOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.926000 audit: BPF prog-id=433 op=LOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fe2539a0290 a2=98 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.926000 audit: BPF prog-id=434 op=LOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2fe25399ffe8 a2=98 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.926000 audit: BPF prog-id=434 op=UNLOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.926000 audit: BPF prog-id=433 op=UNLOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.926000 audit: BPF prog-id=435 op=LOAD Sep 11 18:09:37.926000 audit[9872]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2fe2539a04f0 a2=98 a3=0 items=0 ppid=9860 pid=9872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303364363531383833623965636539363134623233386330 Sep 11 18:09:37.950138 kernel: docker0: port 1(vethaa4e7bc) entered blocking state Sep 11 18:09:37.950206 kernel: docker0: port 1(vethaa4e7bc) entered disabled state Sep 11 18:09:37.951020 kernel: vethaa4e7bc: entered allmulticast mode Sep 11 18:09:37.946000 audit: ANOM_PROMISCUOUS dev=vethaa4e7bc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:37.952117 kernel: vethaa4e7bc: entered promiscuous mode Sep 11 18:09:37.946000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e7680 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.946000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:37.953286 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:37.954000 audit[9893]: NETFILTER_CFG table=raw:188 family=2 entries=1 op=nft_register_rule pid=9893 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:37.954000 audit[9893]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe7356cf00 a2=0 a3=0 items=0 ppid=2991 pid=9893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:37.954000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:37.955952 systemd-networkd[2304]: vethaa4e7bc: Link UP Sep 11 18:09:37.966297 kernel: eth0: renamed from veth2d9e274 Sep 11 18:09:37.966349 kernel: docker0: port 1(vethaa4e7bc) entered blocking state Sep 11 18:09:37.966371 kernel: docker0: port 1(vethaa4e7bc) entered forwarding state Sep 11 18:09:37.966360 systemd-networkd[2304]: vethaa4e7bc: Gained carrier Sep 11 18:09:37.966794 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:37.976734 dockerd[2991]: time="2026-09-11T18:09:37.976703379Z" level=info msg="sbJoin: gwep4 ''->'4ca0f277155c', gwep6 ''->''" eid=4ca0f277155c ep=compassionate_wiles net=bridge nid=ad3b593e9776 Sep 11 18:09:38.698364 sshd[9842]: Connection closed by authenticating user root 118.194.249.186 port 57744 [preauth] Sep 11 18:09:38.697000 audit[9842]: AUDIT1109 pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:38.699608 systemd[1]: sshd@62-4129-10.0.0.33:22-118.194.249.186:57744.service: Deactivated successfully. Sep 11 18:09:38.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-4129-10.0.0.33:22-118.194.249.186:57744 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:38.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-4130-10.0.0.33:22-118.194.249.186:35388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:38.933285 systemd[1]: Started sshd@63-4130-10.0.0.33:22-118.194.249.186:35388.service - OpenSSH per-connection server daemon (118.194.249.186:35388). Sep 11 18:09:39.001120 systemd[1]: docker-a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636.scope: Deactivated successfully. Sep 11 18:09:39.013409 dockerd[2991]: time="2026-09-11T18:09:39.013366104Z" level=info msg="ignoring event" container=a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:39.013808 containerd[2527]: time="2026-09-11T18:09:39.013736715Z" level=info msg="shim disconnected" id=a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636 namespace=moby Sep 11 18:09:39.013808 containerd[2527]: time="2026-09-11T18:09:39.013765679Z" level=info msg="cleaning up after shim disconnected" id=a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636 namespace=moby Sep 11 18:09:39.013808 containerd[2527]: time="2026-09-11T18:09:39.013773015Z" level=info msg="cleaning up dead shim" id=a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636 namespace=moby Sep 11 18:09:39.044152 kernel: docker0: port 1(vethaa4e7bc) entered disabled state Sep 11 18:09:39.044286 systemd-networkd[2304]: vethaa4e7bc: Lost carrier Sep 11 18:09:39.046041 kernel: veth2d9e274: renamed from eth0 Sep 11 18:09:39.061000 audit[9929]: NETFILTER_CFG table=raw:189 family=2 entries=1 op=nft_unregister_rule pid=9929 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:39.061000 audit[9929]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdba4a9b50 a2=0 a3=0 items=0 ppid=2991 pid=9929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.061000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:39.069476 systemd-networkd[2304]: vethaa4e7bc: Link DOWN Sep 11 18:09:39.072599 kernel: docker0: port 1(vethaa4e7bc) entered disabled state Sep 11 18:09:39.072648 kernel: vethaa4e7bc (unregistering): left allmulticast mode Sep 11 18:09:39.074067 kernel: vethaa4e7bc (unregistering): left promiscuous mode Sep 11 18:09:39.068000 audit: ANOM_PROMISCUOUS dev=vethaa4e7bc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:39.075238 kernel: docker0: port 1(vethaa4e7bc) entered disabled state Sep 11 18:09:39.068000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811fff6c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.068000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:39.083965 systemd[1]: run-docker-netns-e2dbf61e6caf.mount: Deactivated successfully. Sep 11 18:09:39.086234 systemd[1]: var-lib-docker-rootfs-overlayfs-a03d651883b9ece9614b238c0045ba9a091665b9340a23803044af5acf7af636.mount: Deactivated successfully. Sep 11 18:09:39.097000 audit: BPF prog-id=431 op=UNLOAD Sep 11 18:09:39.097000 audit: BPF prog-id=435 op=UNLOAD Sep 11 18:09:39.302047 containerd[2527]: time="2026-09-11T18:09:39.301375540Z" level=info msg="connecting to shim bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4" address="unix:///run/containerd/s/c514eef26ce5fe053437e3da533b9dadf31d31103528b5ff8d610c746d5f633d" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:39.323197 systemd[1]: Started docker-bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4.scope - libcontainer container bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4. Sep 11 18:09:39.331000 audit: BPF prog-id=436 op=LOAD Sep 11 18:09:39.331000 audit: BPF prog-id=437 op=LOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e5cfd00dfd8 a2=98 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.331000 audit: BPF prog-id=437 op=UNLOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.331000 audit: BPF prog-id=438 op=LOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e5cfd00e290 a2=98 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.331000 audit: BPF prog-id=439 op=LOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1e5cfd00dfe8 a2=98 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.331000 audit: BPF prog-id=439 op=UNLOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.331000 audit: BPF prog-id=438 op=UNLOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.331000 audit: BPF prog-id=440 op=LOAD Sep 11 18:09:39.331000 audit[9957]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e5cfd00e4f0 a2=98 a3=0 items=0 ppid=9946 pid=9957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643038376431303738343463303233313532313664663563 Sep 11 18:09:39.354392 kernel: docker0: port 1(veth1a7e6fd) entered blocking state Sep 11 18:09:39.354456 kernel: docker0: port 1(veth1a7e6fd) entered disabled state Sep 11 18:09:39.354484 kernel: veth1a7e6fd: entered allmulticast mode Sep 11 18:09:39.356417 kernel: veth1a7e6fd: entered promiscuous mode Sep 11 18:09:39.350000 audit: ANOM_PROMISCUOUS dev=veth1a7e6fd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:39.350000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812077f50 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:39.358635 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:39.358000 audit[9978]: NETFILTER_CFG table=raw:190 family=2 entries=1 op=nft_register_rule pid=9978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:39.358000 audit[9978]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffde6c7fc40 a2=0 a3=0 items=0 ppid=2991 pid=9978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:39.358000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:39.360533 systemd-networkd[2304]: veth1a7e6fd: Link UP Sep 11 18:09:39.368021 kernel: eth0: renamed from vethcd6b9ce Sep 11 18:09:39.368072 kernel: docker0: port 1(veth1a7e6fd) entered blocking state Sep 11 18:09:39.369721 kernel: docker0: port 1(veth1a7e6fd) entered forwarding state Sep 11 18:09:39.370088 systemd-networkd[2304]: veth1a7e6fd: Gained carrier Sep 11 18:09:39.370271 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:39.379594 dockerd[2991]: time="2026-09-11T18:09:39.379568416Z" level=info msg="sbJoin: gwep4 ''->'34c39791fc44', gwep6 ''->''" eid=34c39791fc44 ep=gifted_cray net=bridge nid=ad3b593e9776 Sep 11 18:09:39.856446 sshd[9904]: Connection closed by authenticating user root 118.194.249.186 port 35388 [preauth] Sep 11 18:09:39.855000 audit[9904]: AUDIT1109 pid=9904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:39.858386 systemd[1]: sshd@63-4130-10.0.0.33:22-118.194.249.186:35388.service: Deactivated successfully. Sep 11 18:09:39.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-4130-10.0.0.33:22-118.194.249.186:35388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:40.100747 systemd[1]: Started sshd@64-31-10.0.0.33:22-118.194.249.186:50090.service - OpenSSH per-connection server daemon (118.194.249.186:50090). Sep 11 18:09:40.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-31-10.0.0.33:22-118.194.249.186:50090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:40.404032 systemd[1]: docker-bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4.scope: Deactivated successfully. Sep 11 18:09:40.418445 dockerd[2991]: time="2026-09-11T18:09:40.418386002Z" level=info msg="ignoring event" container=bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:40.419120 containerd[2527]: time="2026-09-11T18:09:40.418562784Z" level=info msg="shim disconnected" id=bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4 namespace=moby Sep 11 18:09:40.419120 containerd[2527]: time="2026-09-11T18:09:40.418611136Z" level=info msg="cleaning up after shim disconnected" id=bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4 namespace=moby Sep 11 18:09:40.419120 containerd[2527]: time="2026-09-11T18:09:40.419059583Z" level=info msg="cleaning up dead shim" id=bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4 namespace=moby Sep 11 18:09:40.445852 systemd-networkd[2304]: veth1a7e6fd: Lost carrier Sep 11 18:09:40.446317 kernel: docker0: port 1(veth1a7e6fd) entered disabled state Sep 11 18:09:40.446396 kernel: vethcd6b9ce: renamed from eth0 Sep 11 18:09:40.465000 audit[10015]: NETFILTER_CFG table=raw:191 family=2 entries=1 op=nft_unregister_rule pid=10015 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:40.465000 audit[10015]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff892f86a0 a2=0 a3=0 items=0 ppid=2991 pid=10015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.465000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:40.473361 systemd-networkd[2304]: veth1a7e6fd: Link DOWN Sep 11 18:09:40.475319 kernel: docker0: port 1(veth1a7e6fd) entered disabled state Sep 11 18:09:40.478241 kernel: veth1a7e6fd (unregistering): left allmulticast mode Sep 11 18:09:40.478299 kernel: veth1a7e6fd (unregistering): left promiscuous mode Sep 11 18:09:40.472000 audit: ANOM_PROMISCUOUS dev=veth1a7e6fd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:40.479590 kernel: docker0: port 1(veth1a7e6fd) entered disabled state Sep 11 18:09:40.472000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8ac20 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.472000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:40.491766 systemd[1]: run-docker-netns-02c0dd5620ac.mount: Deactivated successfully. Sep 11 18:09:40.495062 systemd[1]: var-lib-docker-rootfs-overlayfs-bd087d107844c02315216df5c429300aaa8dcd24d9ed2476793aa660740a79d4.mount: Deactivated successfully. Sep 11 18:09:40.504000 audit: BPF prog-id=436 op=UNLOAD Sep 11 18:09:40.504000 audit: BPF prog-id=440 op=UNLOAD Sep 11 18:09:40.617162 systemd[1]: tmp-containerd\x2dmount943621572.mount: Deactivated successfully. Sep 11 18:09:40.700818 containerd[2527]: time="2026-09-11T18:09:40.700324655Z" level=info msg="connecting to shim 118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50" address="unix:///run/containerd/s/327456fa8a1e2821a7433fa304ea9d6e4342cf42302d5986b91845ef3b21cd22" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:40.723200 systemd[1]: Started docker-118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50.scope - libcontainer container 118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50. Sep 11 18:09:40.731000 audit: BPF prog-id=441 op=LOAD Sep 11 18:09:40.732000 audit: BPF prog-id=442 op=LOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=910289ebfd8 a2=98 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.732000 audit: BPF prog-id=442 op=UNLOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.732000 audit: BPF prog-id=443 op=LOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=910289ec290 a2=98 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.732000 audit: BPF prog-id=444 op=LOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=910289ebfe8 a2=98 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.732000 audit: BPF prog-id=444 op=UNLOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.732000 audit: BPF prog-id=443 op=UNLOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.732000 audit: BPF prog-id=445 op=LOAD Sep 11 18:09:40.732000 audit[10042]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=910289ec4f0 a2=98 a3=0 items=0 ppid=10032 pid=10042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31313866656332316533666337623637376562313831353436 Sep 11 18:09:40.756466 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:40.759228 kernel: docker0: port 1(veth3e35eb2) entered blocking state Sep 11 18:09:40.759288 kernel: docker0: port 1(veth3e35eb2) entered disabled state Sep 11 18:09:40.759314 kernel: veth3e35eb2: entered allmulticast mode Sep 11 18:09:40.761265 kernel: veth3e35eb2: entered promiscuous mode Sep 11 18:09:40.755000 audit: ANOM_PROMISCUOUS dev=veth3e35eb2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:40.755000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811d03950 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.755000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:40.763000 audit[10063]: NETFILTER_CFG table=raw:192 family=2 entries=1 op=nft_register_rule pid=10063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:40.763000 audit[10063]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff059f2910 a2=0 a3=0 items=0 ppid=2991 pid=10063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:40.763000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:40.764639 systemd-networkd[2304]: veth3e35eb2: Link UP Sep 11 18:09:40.773149 kernel: eth0: renamed from veth723fdd2 Sep 11 18:09:40.773221 kernel: docker0: port 1(veth3e35eb2) entered blocking state Sep 11 18:09:40.773242 kernel: docker0: port 1(veth3e35eb2) entered forwarding state Sep 11 18:09:40.773469 systemd-networkd[2304]: veth3e35eb2: Gained carrier Sep 11 18:09:40.773744 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:40.784395 dockerd[2991]: time="2026-09-11T18:09:40.784362628Z" level=info msg="sbJoin: gwep4 ''->'e085db49c7be', gwep6 ''->''" eid=e085db49c7be ep=xenodochial_keldysh net=bridge nid=ad3b593e9776 Sep 11 18:09:41.042443 sshd[9990]: Connection closed by authenticating user root 118.194.249.186 port 50090 [preauth] Sep 11 18:09:41.042000 audit[9990]: AUDIT1109 pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:41.044365 systemd[1]: sshd@64-31-10.0.0.33:22-118.194.249.186:50090.service: Deactivated successfully. Sep 11 18:09:41.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-31-10.0.0.33:22-118.194.249.186:50090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:41.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-32-10.0.0.33:22-118.194.249.186:33720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:41.286204 kernel: kauditd_printk_skb: 148 callbacks suppressed Sep 11 18:09:41.281367 systemd[1]: Started sshd@65-32-10.0.0.33:22-118.194.249.186:33720.service - OpenSSH per-connection server daemon (118.194.249.186:33720). Sep 11 18:09:41.286302 kernel: audit: type=1130 audit(1789150181.280:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-32-10.0.0.33:22-118.194.249.186:33720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:41.814069 systemd[1]: docker-118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50.scope: Deactivated successfully. Sep 11 18:09:41.825262 dockerd[2991]: time="2026-09-11T18:09:41.825193340Z" level=info msg="ignoring event" container=118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:41.825582 containerd[2527]: time="2026-09-11T18:09:41.825303706Z" level=info msg="shim disconnected" id=118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50 namespace=moby Sep 11 18:09:41.825582 containerd[2527]: time="2026-09-11T18:09:41.825331830Z" level=info msg="cleaning up after shim disconnected" id=118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50 namespace=moby Sep 11 18:09:41.825582 containerd[2527]: time="2026-09-11T18:09:41.825339254Z" level=info msg="cleaning up dead shim" id=118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50 namespace=moby Sep 11 18:09:41.848032 kernel: docker0: port 1(veth3e35eb2) entered disabled state Sep 11 18:09:41.848105 kernel: veth723fdd2: renamed from eth0 Sep 11 18:09:41.848132 systemd-networkd[2304]: veth3e35eb2: Lost carrier Sep 11 18:09:41.867000 audit[10102]: NETFILTER_CFG table=raw:193 family=2 entries=1 op=nft_unregister_rule pid=10102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:41.867000 audit[10102]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffce47168a0 a2=0 a3=0 items=0 ppid=2991 pid=10102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:41.874159 kernel: audit: type=1325 audit(1789150181.867:1612): table=raw:193 family=2 entries=1 op=nft_unregister_rule pid=10102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:41.874198 kernel: audit: type=1300 audit(1789150181.867:1612): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffce47168a0 a2=0 a3=0 items=0 ppid=2991 pid=10102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:41.867000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:41.877291 kernel: audit: type=1327 audit(1789150181.867:1612): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:41.877977 systemd-networkd[2304]: veth3e35eb2: Link DOWN Sep 11 18:09:41.879226 kernel: docker0: port 1(veth3e35eb2) entered disabled state Sep 11 18:09:41.880383 kernel: veth3e35eb2 (unregistering): left allmulticast mode Sep 11 18:09:41.882739 kernel: veth3e35eb2 (unregistering): left promiscuous mode Sep 11 18:09:41.876000 audit: ANOM_PROMISCUOUS dev=veth3e35eb2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:41.884204 kernel: docker0: port 1(veth3e35eb2) entered disabled state Sep 11 18:09:41.884326 kernel: audit: type=1700 audit(1789150181.876:1613): dev=veth3e35eb2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:41.876000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f7c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:41.894032 kernel: audit: type=1300 audit(1789150181.876:1613): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f7c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:41.894624 systemd[1]: run-docker-netns-680b1f8518f7.mount: Deactivated successfully. Sep 11 18:09:41.876000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:41.899035 kernel: audit: type=1327 audit(1789150181.876:1613): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:41.902388 systemd[1]: var-lib-docker-rootfs-overlayfs-118fec21e3fc7b677eb18154663ae26026c7026620dc81fe34fae4a126922b50.mount: Deactivated successfully. Sep 11 18:09:41.908000 audit: BPF prog-id=441 op=UNLOAD Sep 11 18:09:41.908000 audit: BPF prog-id=445 op=UNLOAD Sep 11 18:09:41.911173 kernel: audit: type=1334 audit(1789150181.908:1614): prog-id=441 op=UNLOAD Sep 11 18:09:41.911223 kernel: audit: type=1334 audit(1789150181.908:1615): prog-id=445 op=UNLOAD Sep 11 18:09:42.020589 systemd[1]: tmp-containerd\x2dmount2455003746.mount: Deactivated successfully. Sep 11 18:09:42.105468 containerd[2527]: time="2026-09-11T18:09:42.105359279Z" level=info msg="connecting to shim 086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251" address="unix:///run/containerd/s/128a66dfbbbbaa1bc97233b36905925eba122d3d1715707e1542018c0cf35079" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:42.126188 systemd[1]: Started docker-086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251.scope - libcontainer container 086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251. Sep 11 18:09:42.134000 audit: BPF prog-id=446 op=LOAD Sep 11 18:09:42.135000 audit: BPF prog-id=447 op=LOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d87565b1fd8 a2=98 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.135000 audit: BPF prog-id=447 op=UNLOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.135000 audit: BPF prog-id=448 op=LOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d87565b2290 a2=98 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.135000 audit: BPF prog-id=449 op=LOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3d87565b1fe8 a2=98 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.135000 audit: BPF prog-id=449 op=UNLOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.135000 audit: BPF prog-id=448 op=UNLOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.135000 audit: BPF prog-id=450 op=LOAD Sep 11 18:09:42.135000 audit[10133]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d87565b24f0 a2=98 a3=0 items=0 ppid=10120 pid=10133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30383665346161633661383136306666323733626636636162 Sep 11 18:09:42.137297 kernel: audit: type=1334 audit(1789150182.134:1616): prog-id=446 op=LOAD Sep 11 18:09:42.158884 kernel: docker0: port 1(veth4294b8b) entered blocking state Sep 11 18:09:42.158585 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:42.159034 kernel: docker0: port 1(veth4294b8b) entered disabled state Sep 11 18:09:42.160756 kernel: veth4294b8b: entered allmulticast mode Sep 11 18:09:42.155000 audit: ANOM_PROMISCUOUS dev=veth4294b8b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:42.160865 kernel: veth4294b8b: entered promiscuous mode Sep 11 18:09:42.155000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811311020 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.155000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:42.162000 audit[10155]: NETFILTER_CFG table=raw:194 family=2 entries=1 op=nft_register_rule pid=10155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:42.162000 audit[10155]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc7b45e2d0 a2=0 a3=0 items=0 ppid=2991 pid=10155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:42.162000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:42.163803 systemd-networkd[2304]: veth4294b8b: Link UP Sep 11 18:09:42.178347 kernel: eth0: renamed from veth9ad1d3b Sep 11 18:09:42.178402 kernel: docker0: port 1(veth4294b8b) entered blocking state Sep 11 18:09:42.178381 systemd-networkd[2304]: veth4294b8b: Gained carrier Sep 11 18:09:42.178477 kernel: docker0: port 1(veth4294b8b) entered forwarding state Sep 11 18:09:42.178706 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:42.186540 dockerd[2991]: time="2026-09-11T18:09:42.186510415Z" level=info msg="sbJoin: gwep4 ''->'4e28aa4ca0f9', gwep6 ''->''" eid=4e28aa4ca0f9 ep=upbeat_wilbur net=bridge nid=ad3b593e9776 Sep 11 18:09:42.230000 audit[10075]: AUDIT1109 pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:42.231539 sshd[10075]: Connection closed by authenticating user root 118.194.249.186 port 33720 [preauth] Sep 11 18:09:42.232702 systemd[1]: sshd@65-32-10.0.0.33:22-118.194.249.186:33720.service: Deactivated successfully. Sep 11 18:09:42.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-32-10.0.0.33:22-118.194.249.186:33720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:42.460208 systemd[1]: Started sshd@66-33-10.0.0.33:22-118.194.249.186:53204.service - OpenSSH per-connection server daemon (118.194.249.186:53204). Sep 11 18:09:42.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-33-10.0.0.33:22-118.194.249.186:53204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:43.215291 systemd[1]: docker-086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251.scope: Deactivated successfully. Sep 11 18:09:43.227311 containerd[2527]: time="2026-09-11T18:09:43.227272360Z" level=info msg="shim disconnected" id=086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251 namespace=moby Sep 11 18:09:43.227311 containerd[2527]: time="2026-09-11T18:09:43.227309154Z" level=info msg="cleaning up after shim disconnected" id=086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251 namespace=moby Sep 11 18:09:43.227311 containerd[2527]: time="2026-09-11T18:09:43.227316231Z" level=info msg="cleaning up dead shim" id=086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251 namespace=moby Sep 11 18:09:43.265858 kernel: docker0: port 1(veth4294b8b) entered disabled state Sep 11 18:09:43.265943 kernel: veth9ad1d3b: renamed from eth0 Sep 11 18:09:43.265977 systemd-networkd[2304]: veth4294b8b: Lost carrier Sep 11 18:09:43.278000 audit[10194]: NETFILTER_CFG table=raw:195 family=2 entries=1 op=nft_unregister_rule pid=10194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:43.278000 audit[10194]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffde73e8290 a2=0 a3=0 items=0 ppid=2991 pid=10194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.278000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:43.285459 systemd-networkd[2304]: veth4294b8b: Link DOWN Sep 11 18:09:43.287019 kernel: docker0: port 1(veth4294b8b) entered disabled state Sep 11 18:09:43.291371 kernel: veth4294b8b (unregistering): left allmulticast mode Sep 11 18:09:43.291438 kernel: veth4294b8b (unregistering): left promiscuous mode Sep 11 18:09:43.284000 audit: ANOM_PROMISCUOUS dev=veth4294b8b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:43.291656 kernel: docker0: port 1(veth4294b8b) entered disabled state Sep 11 18:09:43.284000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbab00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.284000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:43.300794 systemd[1]: run-docker-netns-cf46a2610634.mount: Deactivated successfully. Sep 11 18:09:43.303250 systemd[1]: var-lib-docker-rootfs-overlayfs-086e4aac6a8160ff273bf6cabfacc24fa086c60cfc849e090a1fe3f98651e251.mount: Deactivated successfully. Sep 11 18:09:43.312000 audit: BPF prog-id=446 op=UNLOAD Sep 11 18:09:43.312000 audit: BPF prog-id=450 op=UNLOAD Sep 11 18:09:43.393441 sshd[10168]: Connection closed by authenticating user root 118.194.249.186 port 53204 [preauth] Sep 11 18:09:43.393000 audit[10168]: AUDIT1109 pid=10168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:43.395987 systemd[1]: sshd@66-33-10.0.0.33:22-118.194.249.186:53204.service: Deactivated successfully. Sep 11 18:09:43.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-33-10.0.0.33:22-118.194.249.186:53204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:43.425776 systemd[1]: tmp-containerd\x2dmount1747388706.mount: Deactivated successfully. Sep 11 18:09:43.498397 containerd[2527]: time="2026-09-11T18:09:43.498320802Z" level=info msg="connecting to shim 3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa" address="unix:///run/containerd/s/249facffe277e4f623a09f86f681ce6068056314ee6292a5c6a0507d24e38f8d" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:43.520184 systemd[1]: Started docker-3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa.scope - libcontainer container 3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa. Sep 11 18:09:43.527000 audit: BPF prog-id=451 op=LOAD Sep 11 18:09:43.528000 audit: BPF prog-id=452 op=LOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=117027b3bfd8 a2=98 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.528000 audit: BPF prog-id=452 op=UNLOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.528000 audit: BPF prog-id=453 op=LOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=117027b3c290 a2=98 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.528000 audit: BPF prog-id=454 op=LOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=117027b3bfe8 a2=98 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.528000 audit: BPF prog-id=454 op=UNLOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.528000 audit: BPF prog-id=453 op=UNLOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.528000 audit: BPF prog-id=455 op=LOAD Sep 11 18:09:43.528000 audit[10225]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=117027b3c4f0 a2=98 a3=0 items=0 ppid=10214 pid=10225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33323431663763333861383761616137333632613065636636 Sep 11 18:09:43.550940 kernel: docker0: port 1(veth25977cc) entered blocking state Sep 11 18:09:43.550870 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:43.551115 kernel: docker0: port 1(veth25977cc) entered disabled state Sep 11 18:09:43.547000 audit: ANOM_PROMISCUOUS dev=veth25977cc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:43.553334 kernel: veth25977cc: entered allmulticast mode Sep 11 18:09:43.553360 kernel: veth25977cc: entered promiscuous mode Sep 11 18:09:43.547000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109e5cb0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.547000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:43.554000 audit[10247]: NETFILTER_CFG table=raw:196 family=2 entries=1 op=nft_register_rule pid=10247 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:43.554000 audit[10247]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd2dbcffd0 a2=0 a3=0 items=0 ppid=2991 pid=10247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:43.554000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:43.557938 systemd-networkd[2304]: veth25977cc: Link UP Sep 11 18:09:43.565037 kernel: eth0: renamed from veth1d71e78 Sep 11 18:09:43.567138 kernel: docker0: port 1(veth25977cc) entered blocking state Sep 11 18:09:43.567193 kernel: docker0: port 1(veth25977cc) entered forwarding state Sep 11 18:09:43.567227 systemd-networkd[2304]: veth25977cc: Gained carrier Sep 11 18:09:43.567772 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:43.574717 dockerd[2991]: time="2026-09-11T18:09:43.574687753Z" level=info msg="sbJoin: gwep4 ''->'8dea84860e33', gwep6 ''->''" eid=8dea84860e33 ep=reverent_franklin net=bridge nid=ad3b593e9776 Sep 11 18:09:43.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-34-10.0.0.33:22-118.194.249.186:41064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:43.637964 systemd[1]: Started sshd@67-34-10.0.0.33:22-118.194.249.186:41064.service - OpenSSH per-connection server daemon (118.194.249.186:41064). Sep 11 18:09:44.581515 sshd[10257]: Connection closed by authenticating user root 118.194.249.186 port 41064 [preauth] Sep 11 18:09:44.580000 audit[10257]: AUDIT1109 pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:44.582850 systemd[1]: sshd@67-34-10.0.0.33:22-118.194.249.186:41064.service: Deactivated successfully. Sep 11 18:09:44.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-34-10.0.0.33:22-118.194.249.186:41064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:44.602963 systemd[1]: docker-3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa.scope: Deactivated successfully. Sep 11 18:09:44.615129 dockerd[2991]: time="2026-09-11T18:09:44.615092872Z" level=info msg="ignoring event" container=3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:44.615630 containerd[2527]: time="2026-09-11T18:09:44.615460783Z" level=info msg="shim disconnected" id=3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa namespace=moby Sep 11 18:09:44.615630 containerd[2527]: time="2026-09-11T18:09:44.615490572Z" level=info msg="cleaning up after shim disconnected" id=3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa namespace=moby Sep 11 18:09:44.615630 containerd[2527]: time="2026-09-11T18:09:44.615504250Z" level=info msg="cleaning up dead shim" id=3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa namespace=moby Sep 11 18:09:44.639441 kernel: docker0: port 1(veth25977cc) entered disabled state Sep 11 18:09:44.639504 kernel: veth1d71e78: renamed from eth0 Sep 11 18:09:44.639604 systemd-networkd[2304]: veth25977cc: Lost carrier Sep 11 18:09:44.657000 audit[10285]: NETFILTER_CFG table=raw:197 family=2 entries=1 op=nft_unregister_rule pid=10285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:44.657000 audit[10285]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff4d4223d0 a2=0 a3=0 items=0 ppid=2991 pid=10285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.657000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:44.661786 systemd-networkd[2304]: veth25977cc: Link DOWN Sep 11 18:09:44.660000 audit: ANOM_PROMISCUOUS dev=veth25977cc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:44.665855 kernel: docker0: port 1(veth25977cc) entered disabled state Sep 11 18:09:44.665976 kernel: veth25977cc (unregistering): left allmulticast mode Sep 11 18:09:44.666107 kernel: veth25977cc (unregistering): left promiscuous mode Sep 11 18:09:44.666171 kernel: docker0: port 1(veth25977cc) entered disabled state Sep 11 18:09:44.660000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067100 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.660000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:44.679173 systemd[1]: run-docker-netns-eecd0bf81e9d.mount: Deactivated successfully. Sep 11 18:09:44.683203 systemd[1]: var-lib-docker-rootfs-overlayfs-3241f7c38a87aaa7362a0ecf61e4566043531fad5a5276ca9922458b9f433caa.mount: Deactivated successfully. Sep 11 18:09:44.690000 audit: BPF prog-id=451 op=UNLOAD Sep 11 18:09:44.690000 audit: BPF prog-id=455 op=UNLOAD Sep 11 18:09:44.806499 systemd[1]: Started sshd@68-4131-10.0.0.33:22-118.194.249.186:55682.service - OpenSSH per-connection server daemon (118.194.249.186:55682). Sep 11 18:09:44.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-4131-10.0.0.33:22-118.194.249.186:55682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:44.812312 systemd[1]: tmp-containerd\x2dmount83523300.mount: Deactivated successfully. Sep 11 18:09:44.889832 containerd[2527]: time="2026-09-11T18:09:44.889768548Z" level=info msg="connecting to shim e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5" address="unix:///run/containerd/s/c8b6f40c6b6f54f045493d3e223c6336c74b017575f30883ae85039ac85bd23c" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:44.912174 systemd[1]: Started docker-e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5.scope - libcontainer container e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5. Sep 11 18:09:44.920000 audit: BPF prog-id=456 op=LOAD Sep 11 18:09:44.920000 audit: BPF prog-id=457 op=LOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27979ac39fd8 a2=98 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.920000 audit: BPF prog-id=457 op=UNLOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.920000 audit: BPF prog-id=458 op=LOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27979ac3a290 a2=98 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.920000 audit: BPF prog-id=459 op=LOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=27979ac39fe8 a2=98 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.920000 audit: BPF prog-id=459 op=UNLOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.920000 audit: BPF prog-id=458 op=UNLOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.920000 audit: BPF prog-id=460 op=LOAD Sep 11 18:09:44.920000 audit[10319]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27979ac3a4f0 a2=98 a3=0 items=0 ppid=10307 pid=10319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65313266333865353133616166666434353837633039613038 Sep 11 18:09:44.941408 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:44.947625 kernel: docker0: port 1(veth51034cc) entered blocking state Sep 11 18:09:44.947661 kernel: docker0: port 1(veth51034cc) entered disabled state Sep 11 18:09:44.949403 kernel: veth51034cc: entered allmulticast mode Sep 11 18:09:44.949462 kernel: veth51034cc: entered promiscuous mode Sep 11 18:09:44.941000 audit: ANOM_PROMISCUOUS dev=veth51034cc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:44.941000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812076990 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.941000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:44.950000 audit[10343]: NETFILTER_CFG table=raw:198 family=2 entries=1 op=nft_register_rule pid=10343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:44.950000 audit[10343]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff883363e0 a2=0 a3=0 items=0 ppid=2991 pid=10343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:44.950000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:44.951986 systemd-networkd[2304]: veth51034cc: Link UP Sep 11 18:09:44.958019 kernel: eth0: renamed from veth504553e Sep 11 18:09:44.960020 kernel: docker0: port 1(veth51034cc) entered blocking state Sep 11 18:09:44.959715 systemd-networkd[2304]: veth51034cc: Gained carrier Sep 11 18:09:44.960104 kernel: docker0: port 1(veth51034cc) entered forwarding state Sep 11 18:09:44.960288 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:44.972378 dockerd[2991]: time="2026-09-11T18:09:44.972350257Z" level=info msg="sbJoin: gwep4 ''->'e768f04024f7', gwep6 ''->''" eid=e768f04024f7 ep=friendly_satoshi net=bridge nid=ad3b593e9776 Sep 11 18:09:45.728874 sshd[10294]: Connection closed by authenticating user root 118.194.249.186 port 55682 [preauth] Sep 11 18:09:45.728000 audit[10294]: AUDIT1109 pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:45.730701 systemd[1]: sshd@68-4131-10.0.0.33:22-118.194.249.186:55682.service: Deactivated successfully. Sep 11 18:09:45.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-4131-10.0.0.33:22-118.194.249.186:55682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:45.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4132-10.0.0.33:22-118.194.249.186:44544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:45.964361 systemd[1]: Started sshd@69-4132-10.0.0.33:22-118.194.249.186:44544.service - OpenSSH per-connection server daemon (118.194.249.186:44544). Sep 11 18:09:45.994822 systemd[1]: docker-e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5.scope: Deactivated successfully. Sep 11 18:09:46.008988 containerd[2527]: time="2026-09-11T18:09:46.008944271Z" level=info msg="shim disconnected" id=e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5 namespace=moby Sep 11 18:09:46.008988 containerd[2527]: time="2026-09-11T18:09:46.008976573Z" level=info msg="cleaning up after shim disconnected" id=e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5 namespace=moby Sep 11 18:09:46.008988 containerd[2527]: time="2026-09-11T18:09:46.008984991Z" level=info msg="cleaning up dead shim" id=e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5 namespace=moby Sep 11 18:09:46.010170 dockerd[2991]: time="2026-09-11T18:09:46.008948173Z" level=info msg="ignoring event" container=e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:46.032279 systemd-networkd[2304]: veth51034cc: Lost carrier Sep 11 18:09:46.033248 kernel: docker0: port 1(veth51034cc) entered disabled state Sep 11 18:09:46.033276 kernel: veth504553e: renamed from eth0 Sep 11 18:09:46.050000 audit[10378]: NETFILTER_CFG table=raw:199 family=2 entries=1 op=nft_unregister_rule pid=10378 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:46.050000 audit[10378]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd4dbc3110 a2=0 a3=0 items=0 ppid=2991 pid=10378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.050000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:46.055400 systemd-networkd[2304]: veth51034cc: Link DOWN Sep 11 18:09:46.057029 kernel: docker0: port 1(veth51034cc) entered disabled state Sep 11 18:09:46.059256 kernel: veth51034cc (unregistering): left allmulticast mode Sep 11 18:09:46.059310 kernel: veth51034cc (unregistering): left promiscuous mode Sep 11 18:09:46.054000 audit: ANOM_PROMISCUOUS dev=veth51034cc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:46.060699 kernel: docker0: port 1(veth51034cc) entered disabled state Sep 11 18:09:46.054000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76a40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.054000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:46.071646 systemd[1]: run-docker-netns-3b0fc8e62e1f.mount: Deactivated successfully. Sep 11 18:09:46.074509 systemd[1]: var-lib-docker-rootfs-overlayfs-e12f38e513aaffd4587c09a087a4b407126076614a6f6f0e96892dc1443457e5.mount: Deactivated successfully. Sep 11 18:09:46.083000 audit: BPF prog-id=456 op=UNLOAD Sep 11 18:09:46.083000 audit: BPF prog-id=460 op=UNLOAD Sep 11 18:09:46.223683 systemd[1]: tmp-containerd\x2dmount3735692139.mount: Deactivated successfully. Sep 11 18:09:46.332350 containerd[2527]: time="2026-09-11T18:09:46.331463756Z" level=info msg="connecting to shim b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea" address="unix:///run/containerd/s/b33b3ab2bd9897ae18aef902f147b962f60940b05b05a2b01f0ee43137ec1040" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:46.351170 systemd[1]: Started docker-b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea.scope - libcontainer container b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea. Sep 11 18:09:46.358000 audit: BPF prog-id=461 op=LOAD Sep 11 18:09:46.360546 kernel: kauditd_printk_skb: 119 callbacks suppressed Sep 11 18:09:46.360601 kernel: audit: type=1334 audit(1789150186.358:1670): prog-id=461 op=LOAD Sep 11 18:09:46.359000 audit: BPF prog-id=462 op=LOAD Sep 11 18:09:46.362591 kernel: audit: type=1334 audit(1789150186.359:1671): prog-id=462 op=LOAD Sep 11 18:09:46.359000 audit[10407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=15b73c8f5fd8 a2=98 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.365421 kernel: audit: type=1300 audit(1789150186.359:1671): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=15b73c8f5fd8 a2=98 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.359000 audit: BPF prog-id=462 op=UNLOAD Sep 11 18:09:46.370398 kernel: audit: type=1327 audit(1789150186.359:1671): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.370430 kernel: audit: type=1334 audit(1789150186.359:1672): prog-id=462 op=UNLOAD Sep 11 18:09:46.359000 audit[10407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.383176 kernel: audit: type=1300 audit(1789150186.359:1672): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.387024 kernel: audit: type=1327 audit(1789150186.359:1672): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.359000 audit: BPF prog-id=463 op=LOAD Sep 11 18:09:46.359000 audit[10407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=15b73c8f6290 a2=98 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.390705 kernel: audit: type=1334 audit(1789150186.359:1673): prog-id=463 op=LOAD Sep 11 18:09:46.390744 kernel: audit: type=1300 audit(1789150186.359:1673): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=15b73c8f6290 a2=98 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.394977 kernel: audit: type=1327 audit(1789150186.359:1673): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.360000 audit: BPF prog-id=464 op=LOAD Sep 11 18:09:46.360000 audit[10407]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=15b73c8f5fe8 a2=98 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.360000 audit: BPF prog-id=464 op=UNLOAD Sep 11 18:09:46.360000 audit[10407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.360000 audit: BPF prog-id=463 op=UNLOAD Sep 11 18:09:46.360000 audit[10407]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.360000 audit: BPF prog-id=465 op=LOAD Sep 11 18:09:46.360000 audit[10407]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=15b73c8f64f0 a2=98 a3=0 items=0 ppid=10396 pid=10407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.360000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62386330363039323134323236643365303561343664396365 Sep 11 18:09:46.398998 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:46.399604 kernel: docker0: port 1(veth0b4fc01) entered blocking state Sep 11 18:09:46.399633 kernel: docker0: port 1(veth0b4fc01) entered disabled state Sep 11 18:09:46.400566 kernel: veth0b4fc01: entered allmulticast mode Sep 11 18:09:46.401600 kernel: veth0b4fc01: entered promiscuous mode Sep 11 18:09:46.396000 audit: ANOM_PROMISCUOUS dev=veth0b4fc01 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:46.396000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109a0a20 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.396000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:46.403000 audit[10429]: NETFILTER_CFG table=raw:200 family=2 entries=1 op=nft_register_rule pid=10429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:46.403000 audit[10429]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd8657a140 a2=0 a3=0 items=0 ppid=2991 pid=10429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:46.403000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:46.405122 systemd-networkd[2304]: veth0b4fc01: Link UP Sep 11 18:09:46.414654 kernel: eth0: renamed from vethd5f3bd0 Sep 11 18:09:46.414715 kernel: docker0: port 1(veth0b4fc01) entered blocking state Sep 11 18:09:46.414735 kernel: docker0: port 1(veth0b4fc01) entered forwarding state Sep 11 18:09:46.414770 systemd-networkd[2304]: veth0b4fc01: Gained carrier Sep 11 18:09:46.415026 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:46.426326 dockerd[2991]: time="2026-09-11T18:09:46.426294058Z" level=info msg="sbJoin: gwep4 ''->'50ada5aed065', gwep6 ''->''" eid=50ada5aed065 ep=zen_mclaren net=bridge nid=ad3b593e9776 Sep 11 18:09:46.892426 sshd[10354]: Connection closed by authenticating user root 118.194.249.186 port 44544 [preauth] Sep 11 18:09:46.891000 audit[10354]: AUDIT1109 pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:46.894163 systemd[1]: sshd@69-4132-10.0.0.33:22-118.194.249.186:44544.service: Deactivated successfully. Sep 11 18:09:46.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4132-10.0.0.33:22-118.194.249.186:44544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:47.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-4133-10.0.0.33:22-118.194.249.186:52158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:47.139312 systemd[1]: Started sshd@70-4133-10.0.0.33:22-118.194.249.186:52158.service - OpenSSH per-connection server daemon (118.194.249.186:52158). Sep 11 18:09:47.452470 systemd[1]: docker-b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea.scope: Deactivated successfully. Sep 11 18:09:47.465516 dockerd[2991]: time="2026-09-11T18:09:47.465473692Z" level=info msg="ignoring event" container=b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:47.465801 containerd[2527]: time="2026-09-11T18:09:47.465722348Z" level=info msg="shim disconnected" id=b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea namespace=moby Sep 11 18:09:47.465801 containerd[2527]: time="2026-09-11T18:09:47.465750958Z" level=info msg="cleaning up after shim disconnected" id=b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea namespace=moby Sep 11 18:09:47.465801 containerd[2527]: time="2026-09-11T18:09:47.465758382Z" level=info msg="cleaning up dead shim" id=b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea namespace=moby Sep 11 18:09:47.488020 kernel: docker0: port 1(veth0b4fc01) entered disabled state Sep 11 18:09:47.488138 systemd-networkd[2304]: veth0b4fc01: Lost carrier Sep 11 18:09:47.490031 kernel: vethd5f3bd0: renamed from eth0 Sep 11 18:09:47.515000 audit[10466]: NETFILTER_CFG table=raw:201 family=2 entries=1 op=nft_unregister_rule pid=10466 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:47.515000 audit[10466]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdb786ccf0 a2=0 a3=0 items=0 ppid=2991 pid=10466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.515000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:47.524727 systemd-networkd[2304]: veth0b4fc01: Link DOWN Sep 11 18:09:47.526026 kernel: docker0: port 1(veth0b4fc01) entered disabled state Sep 11 18:09:47.528866 kernel: veth0b4fc01 (unregistering): left allmulticast mode Sep 11 18:09:47.528917 kernel: veth0b4fc01 (unregistering): left promiscuous mode Sep 11 18:09:47.523000 audit: ANOM_PROMISCUOUS dev=veth0b4fc01 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:47.530066 kernel: docker0: port 1(veth0b4fc01) entered disabled state Sep 11 18:09:47.523000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811fffee0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.523000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:47.539040 systemd[1]: run-docker-netns-aea713cb87eb.mount: Deactivated successfully. Sep 11 18:09:47.547000 audit: BPF prog-id=461 op=UNLOAD Sep 11 18:09:47.547000 audit: BPF prog-id=465 op=UNLOAD Sep 11 18:09:47.549128 systemd[1]: var-lib-docker-rootfs-overlayfs-b8c0609214226d3e05a46d9ce825e620912c45ac077e50fd2b480028ff355fea.mount: Deactivated successfully. Sep 11 18:09:47.659982 systemd[1]: tmp-containerd\x2dmount677584246.mount: Deactivated successfully. Sep 11 18:09:47.734662 containerd[2527]: time="2026-09-11T18:09:47.733577233Z" level=info msg="connecting to shim 4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80" address="unix:///run/containerd/s/34dc3d9b044a1f1d95142b59b24e3f991d57ef75e686575378623635b9d28ad0" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:47.756185 systemd[1]: Started docker-4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80.scope - libcontainer container 4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80. Sep 11 18:09:47.764000 audit: BPF prog-id=466 op=LOAD Sep 11 18:09:47.765000 audit: BPF prog-id=467 op=LOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=da7f94ddfd8 a2=98 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.765000 audit: BPF prog-id=467 op=UNLOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.765000 audit: BPF prog-id=468 op=LOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=da7f94de290 a2=98 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.765000 audit: BPF prog-id=469 op=LOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=da7f94ddfe8 a2=98 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.765000 audit: BPF prog-id=469 op=UNLOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.765000 audit: BPF prog-id=468 op=UNLOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.765000 audit: BPF prog-id=470 op=LOAD Sep 11 18:09:47.765000 audit[10495]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=da7f94de4f0 a2=98 a3=0 items=0 ppid=10484 pid=10495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34646431656666623037393030343730653230356437333130 Sep 11 18:09:47.790199 kernel: docker0: port 1(veth5367d98) entered blocking state Sep 11 18:09:47.790263 kernel: docker0: port 1(veth5367d98) entered disabled state Sep 11 18:09:47.790282 kernel: veth5367d98: entered allmulticast mode Sep 11 18:09:47.792236 kernel: veth5367d98: entered promiscuous mode Sep 11 18:09:47.786000 audit: ANOM_PROMISCUOUS dev=veth5367d98 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:47.792986 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:47.786000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c88b10 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.786000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:47.794000 audit[10517]: NETFILTER_CFG table=raw:202 family=2 entries=1 op=nft_register_rule pid=10517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:47.794000 audit[10517]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc22a97ee0 a2=0 a3=0 items=0 ppid=2991 pid=10517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:47.794000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:47.796084 systemd-networkd[2304]: veth5367d98: Link UP Sep 11 18:09:47.805022 kernel: eth0: renamed from vetha9a02dd Sep 11 18:09:47.808069 kernel: docker0: port 1(veth5367d98) entered blocking state Sep 11 18:09:47.807898 systemd-networkd[2304]: veth5367d98: Gained carrier Sep 11 18:09:47.808186 kernel: docker0: port 1(veth5367d98) entered forwarding state Sep 11 18:09:47.808275 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:47.816839 dockerd[2991]: time="2026-09-11T18:09:47.816810795Z" level=info msg="sbJoin: gwep4 ''->'f8cbf8ea217d', gwep6 ''->''" eid=f8cbf8ea217d ep=ecstatic_tesla net=bridge nid=ad3b593e9776 Sep 11 18:09:48.084321 sshd[10440]: Connection closed by authenticating user root 118.194.249.186 port 52158 [preauth] Sep 11 18:09:48.083000 audit[10440]: AUDIT1109 pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:48.085909 systemd[1]: sshd@70-4133-10.0.0.33:22-118.194.249.186:52158.service: Deactivated successfully. Sep 11 18:09:48.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-4133-10.0.0.33:22-118.194.249.186:52158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:48.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-35-10.0.0.33:22-118.194.249.186:38034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:48.314285 systemd[1]: Started sshd@71-35-10.0.0.33:22-118.194.249.186:38034.service - OpenSSH per-connection server daemon (118.194.249.186:38034). Sep 11 18:09:48.841998 systemd[1]: docker-4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80.scope: Deactivated successfully. Sep 11 18:09:48.853657 dockerd[2991]: time="2026-09-11T18:09:48.853575224Z" level=info msg="ignoring event" container=4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:48.854459 containerd[2527]: time="2026-09-11T18:09:48.854366281Z" level=info msg="shim disconnected" id=4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80 namespace=moby Sep 11 18:09:48.854459 containerd[2527]: time="2026-09-11T18:09:48.854421506Z" level=info msg="cleaning up after shim disconnected" id=4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80 namespace=moby Sep 11 18:09:48.854459 containerd[2527]: time="2026-09-11T18:09:48.854430207Z" level=info msg="cleaning up dead shim" id=4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80 namespace=moby Sep 11 18:09:48.867194 systemd-networkd[2304]: veth5367d98: Gained IPv6LL Sep 11 18:09:48.880022 kernel: vetha9a02dd: renamed from eth0 Sep 11 18:09:48.880093 kernel: docker0: port 1(veth5367d98) entered disabled state Sep 11 18:09:48.880997 systemd-networkd[2304]: veth5367d98: Lost carrier Sep 11 18:09:48.901000 audit[10556]: NETFILTER_CFG table=raw:203 family=2 entries=1 op=nft_unregister_rule pid=10556 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:48.901000 audit[10556]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff94df5f20 a2=0 a3=0 items=0 ppid=2991 pid=10556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:48.901000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:48.909367 systemd-networkd[2304]: veth5367d98: Link DOWN Sep 11 18:09:48.911020 kernel: docker0: port 1(veth5367d98) entered disabled state Sep 11 18:09:48.908000 audit: ANOM_PROMISCUOUS dev=veth5367d98 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:48.914626 kernel: veth5367d98 (unregistering): left allmulticast mode Sep 11 18:09:48.914655 kernel: veth5367d98 (unregistering): left promiscuous mode Sep 11 18:09:48.914674 kernel: docker0: port 1(veth5367d98) entered disabled state Sep 11 18:09:48.908000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8a940 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:48.908000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:48.926209 systemd[1]: run-docker-netns-830b6444ffa5.mount: Deactivated successfully. Sep 11 18:09:48.931056 systemd[1]: var-lib-docker-rootfs-overlayfs-4dd1effb07900470e205d7310ec5094f3eb8ea0f6ef5e9ed9189b9eb20eb8e80.mount: Deactivated successfully. Sep 11 18:09:48.944000 audit: BPF prog-id=466 op=UNLOAD Sep 11 18:09:48.944000 audit: BPF prog-id=470 op=UNLOAD Sep 11 18:09:49.064514 systemd[1]: tmp-containerd\x2dmount488363462.mount: Deactivated successfully. Sep 11 18:09:49.140956 containerd[2527]: time="2026-09-11T18:09:49.140412456Z" level=info msg="connecting to shim bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649" address="unix:///run/containerd/s/cdc64009907496d8427fbb3249ac1385f4e15f906bb65b588f32aeae81441b1f" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:49.164195 systemd[1]: Started docker-bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649.scope - libcontainer container bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649. Sep 11 18:09:49.171000 audit: BPF prog-id=471 op=LOAD Sep 11 18:09:49.172000 audit: BPF prog-id=472 op=LOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1b8913ef9fd8 a2=98 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.172000 audit: BPF prog-id=472 op=UNLOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.172000 audit: BPF prog-id=473 op=LOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1b8913efa290 a2=98 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.172000 audit: BPF prog-id=474 op=LOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1b8913ef9fe8 a2=98 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.172000 audit: BPF prog-id=474 op=UNLOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.172000 audit: BPF prog-id=473 op=UNLOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.172000 audit: BPF prog-id=475 op=LOAD Sep 11 18:09:49.172000 audit[10586]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1b8913efa4f0 a2=98 a3=0 items=0 ppid=10574 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643762336634396162663562366563393938623362373932 Sep 11 18:09:49.197267 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:49.199216 kernel: docker0: port 1(vethcd28090) entered blocking state Sep 11 18:09:49.199271 kernel: docker0: port 1(vethcd28090) entered disabled state Sep 11 18:09:49.199416 kernel: vethcd28090: entered allmulticast mode Sep 11 18:09:49.196000 audit: ANOM_PROMISCUOUS dev=vethcd28090 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:49.196000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811776d20 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.196000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:49.201527 kernel: vethcd28090: entered promiscuous mode Sep 11 18:09:49.201000 audit[10606]: NETFILTER_CFG table=raw:204 family=2 entries=1 op=nft_register_rule pid=10606 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:49.201000 audit[10606]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffeb26c320 a2=0 a3=0 items=0 ppid=2991 pid=10606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:49.201000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:49.203233 systemd-networkd[2304]: vethcd28090: Link UP Sep 11 18:09:49.211104 kernel: eth0: renamed from veth370d0ab Sep 11 18:09:49.211168 kernel: docker0: port 1(vethcd28090) entered blocking state Sep 11 18:09:49.212108 kernel: docker0: port 1(vethcd28090) entered forwarding state Sep 11 18:09:49.212332 systemd-networkd[2304]: vethcd28090: Gained carrier Sep 11 18:09:49.212910 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:49.220331 dockerd[2991]: time="2026-09-11T18:09:49.220302851Z" level=info msg="sbJoin: gwep4 ''->'cb59d0f4e995', gwep6 ''->''" eid=cb59d0f4e995 ep=wizardly_jennings net=bridge nid=ad3b593e9776 Sep 11 18:09:49.233866 sshd[10529]: Connection closed by authenticating user root 118.194.249.186 port 38034 [preauth] Sep 11 18:09:49.233000 audit[10529]: AUDIT1109 pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:49.235510 systemd[1]: sshd@71-35-10.0.0.33:22-118.194.249.186:38034.service: Deactivated successfully. Sep 11 18:09:49.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-35-10.0.0.33:22-118.194.249.186:38034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:49.473147 systemd[1]: Started sshd@72-4134-10.0.0.33:22-118.194.249.186:55468.service - OpenSSH per-connection server daemon (118.194.249.186:55468). Sep 11 18:09:49.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-4134-10.0.0.33:22-118.194.249.186:55468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:50.250606 systemd[1]: docker-bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649.scope: Deactivated successfully. Sep 11 18:09:50.265581 dockerd[2991]: time="2026-09-11T18:09:50.265522831Z" level=info msg="ignoring event" container=bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:50.266030 containerd[2527]: time="2026-09-11T18:09:50.265855249Z" level=info msg="shim disconnected" id=bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649 namespace=moby Sep 11 18:09:50.266030 containerd[2527]: time="2026-09-11T18:09:50.265885648Z" level=info msg="cleaning up after shim disconnected" id=bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649 namespace=moby Sep 11 18:09:50.266030 containerd[2527]: time="2026-09-11T18:09:50.265893551Z" level=info msg="cleaning up dead shim" id=bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649 namespace=moby Sep 11 18:09:50.297112 kernel: docker0: port 1(vethcd28090) entered disabled state Sep 11 18:09:50.297271 kernel: veth370d0ab: renamed from eth0 Sep 11 18:09:50.297538 systemd-networkd[2304]: vethcd28090: Lost carrier Sep 11 18:09:50.321000 audit[10641]: NETFILTER_CFG table=raw:205 family=2 entries=1 op=nft_unregister_rule pid=10641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:50.321000 audit[10641]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd16b53b90 a2=0 a3=0 items=0 ppid=2991 pid=10641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.321000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:50.328614 systemd-networkd[2304]: vethcd28090: Link DOWN Sep 11 18:09:50.330023 kernel: docker0: port 1(vethcd28090) entered disabled state Sep 11 18:09:50.333211 kernel: vethcd28090 (unregistering): left allmulticast mode Sep 11 18:09:50.333261 kernel: vethcd28090 (unregistering): left promiscuous mode Sep 11 18:09:50.333279 kernel: docker0: port 1(vethcd28090) entered disabled state Sep 11 18:09:50.327000 audit: ANOM_PROMISCUOUS dev=vethcd28090 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:50.327000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8bbe0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.327000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:50.350784 systemd[1]: run-docker-netns-cf3e7a731c5a.mount: Deactivated successfully. Sep 11 18:09:50.353867 systemd[1]: var-lib-docker-rootfs-overlayfs-bd7b3f49abf5b6ec998b3b792ee39303f4a30947a3f7fa9976bd1bd47ae56649.mount: Deactivated successfully. Sep 11 18:09:50.362000 audit: BPF prog-id=471 op=UNLOAD Sep 11 18:09:50.362000 audit: BPF prog-id=475 op=UNLOAD Sep 11 18:09:50.400816 sshd[10617]: Connection closed by authenticating user root 118.194.249.186 port 55468 [preauth] Sep 11 18:09:50.399000 audit[10617]: AUDIT1109 pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:50.402180 systemd[1]: sshd@72-4134-10.0.0.33:22-118.194.249.186:55468.service: Deactivated successfully. Sep 11 18:09:50.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-4134-10.0.0.33:22-118.194.249.186:55468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:50.495854 systemd[1]: tmp-containerd\x2dmount2013114617.mount: Deactivated successfully. Sep 11 18:09:50.591818 containerd[2527]: time="2026-09-11T18:09:50.591327891Z" level=info msg="connecting to shim 2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3" address="unix:///run/containerd/s/0c484e47ea5125a3ae809035f646a23dc147f058aeb637057819d7e9a6fa0f46" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:50.611203 systemd[1]: Started docker-2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3.scope - libcontainer container 2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3. Sep 11 18:09:50.618000 audit: BPF prog-id=476 op=LOAD Sep 11 18:09:50.619000 audit: BPF prog-id=477 op=LOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ab414115fd8 a2=98 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.619000 audit: BPF prog-id=477 op=UNLOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.619000 audit: BPF prog-id=478 op=LOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ab414116290 a2=98 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.619000 audit: BPF prog-id=479 op=LOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3ab414115fe8 a2=98 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.619000 audit: BPF prog-id=479 op=UNLOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.619000 audit: BPF prog-id=478 op=UNLOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.619000 audit: BPF prog-id=480 op=LOAD Sep 11 18:09:50.619000 audit[10671]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ab4141164f0 a2=98 a3=0 items=0 ppid=10660 pid=10671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32643837303939313464653932616532303566633936613033 Sep 11 18:09:50.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-36-10.0.0.33:22-118.194.249.186:45454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:50.634122 systemd[1]: Started sshd@73-36-10.0.0.33:22-118.194.249.186:45454.service - OpenSSH per-connection server daemon (118.194.249.186:45454). Sep 11 18:09:50.645060 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:50.647677 kernel: docker0: port 1(vethaf8f367) entered blocking state Sep 11 18:09:50.647712 kernel: docker0: port 1(vethaf8f367) entered disabled state Sep 11 18:09:50.648470 kernel: vethaf8f367: entered allmulticast mode Sep 11 18:09:50.649625 kernel: vethaf8f367: entered promiscuous mode Sep 11 18:09:50.643000 audit: ANOM_PROMISCUOUS dev=vethaf8f367 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:50.643000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f10a50 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.643000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:50.654000 audit[10697]: NETFILTER_CFG table=raw:206 family=2 entries=1 op=nft_register_rule pid=10697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:50.654000 audit[10697]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffff7f08600 a2=0 a3=0 items=0 ppid=2991 pid=10697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:50.654000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:50.656254 systemd-networkd[2304]: vethaf8f367: Link UP Sep 11 18:09:50.665018 kernel: eth0: renamed from veth5df1776 Sep 11 18:09:50.667807 kernel: docker0: port 1(vethaf8f367) entered blocking state Sep 11 18:09:50.667859 kernel: docker0: port 1(vethaf8f367) entered forwarding state Sep 11 18:09:50.668123 systemd-networkd[2304]: vethaf8f367: Gained carrier Sep 11 18:09:50.668800 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:50.680809 dockerd[2991]: time="2026-09-11T18:09:50.680787806Z" level=info msg="sbJoin: gwep4 ''->'d1c69b558fdb', gwep6 ''->''" eid=d1c69b558fdb ep=thirsty_solomon net=bridge nid=ad3b593e9776 Sep 11 18:09:51.570624 sshd[10692]: Connection closed by authenticating user root 118.194.249.186 port 45454 [preauth] Sep 11 18:09:51.570000 audit[10692]: AUDIT1109 pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:51.572159 kernel: kauditd_printk_skb: 138 callbacks suppressed Sep 11 18:09:51.572219 kernel: audit: type=1109 audit(1789150191.570:1734): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:51.572504 systemd[1]: sshd@73-36-10.0.0.33:22-118.194.249.186:45454.service: Deactivated successfully. Sep 11 18:09:51.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-36-10.0.0.33:22-118.194.249.186:45454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:51.579332 kernel: audit: type=1131 audit(1789150191.571:1735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-36-10.0.0.33:22-118.194.249.186:45454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:51.703729 systemd[1]: docker-2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3.scope: Deactivated successfully. Sep 11 18:09:51.717029 containerd[2527]: time="2026-09-11T18:09:51.716925090Z" level=info msg="shim disconnected" id=2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3 namespace=moby Sep 11 18:09:51.717350 dockerd[2991]: time="2026-09-11T18:09:51.716918586Z" level=info msg="ignoring event" container=2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:51.717613 containerd[2527]: time="2026-09-11T18:09:51.717586583Z" level=info msg="cleaning up after shim disconnected" id=2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3 namespace=moby Sep 11 18:09:51.717613 containerd[2527]: time="2026-09-11T18:09:51.717606619Z" level=info msg="cleaning up dead shim" id=2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3 namespace=moby Sep 11 18:09:51.740582 systemd-networkd[2304]: vethaf8f367: Lost carrier Sep 11 18:09:51.741021 kernel: docker0: port 1(vethaf8f367) entered disabled state Sep 11 18:09:51.742019 kernel: veth5df1776: renamed from eth0 Sep 11 18:09:51.756000 audit[10731]: NETFILTER_CFG table=raw:207 family=2 entries=1 op=nft_unregister_rule pid=10731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:51.756000 audit[10731]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcbc5de140 a2=0 a3=0 items=0 ppid=2991 pid=10731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:51.762514 kernel: audit: type=1325 audit(1789150191.756:1736): table=raw:207 family=2 entries=1 op=nft_unregister_rule pid=10731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:51.762558 kernel: audit: type=1300 audit(1789150191.756:1736): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcbc5de140 a2=0 a3=0 items=0 ppid=2991 pid=10731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:51.756000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:51.765070 kernel: audit: type=1327 audit(1789150191.756:1736): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:51.768250 systemd-networkd[2304]: vethaf8f367: Link DOWN Sep 11 18:09:51.770571 kernel: docker0: port 1(vethaf8f367) entered disabled state Sep 11 18:09:51.770622 kernel: vethaf8f367 (unregistering): left allmulticast mode Sep 11 18:09:51.770659 kernel: vethaf8f367 (unregistering): left promiscuous mode Sep 11 18:09:51.766000 audit: ANOM_PROMISCUOUS dev=vethaf8f367 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:51.774164 kernel: docker0: port 1(vethaf8f367) entered disabled state Sep 11 18:09:51.774186 kernel: audit: type=1700 audit(1789150191.766:1737): dev=vethaf8f367 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:51.766000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e1e20 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:51.784536 systemd[1]: run-docker-netns-1b7d09cd9f57.mount: Deactivated successfully. Sep 11 18:09:51.786032 kernel: audit: type=1300 audit(1789150191.766:1737): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e1e20 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:51.766000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:51.790050 kernel: audit: type=1327 audit(1789150191.766:1737): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:51.791603 systemd[1]: var-lib-docker-rootfs-overlayfs-2d8709914de92ae205fc96a03f0c290e30e3132ebd9949a3905e859f5414ebb3.mount: Deactivated successfully. Sep 11 18:09:51.800000 audit: BPF prog-id=476 op=UNLOAD Sep 11 18:09:51.800000 audit: BPF prog-id=480 op=UNLOAD Sep 11 18:09:51.803308 kernel: audit: type=1334 audit(1789150191.800:1738): prog-id=476 op=UNLOAD Sep 11 18:09:51.803340 kernel: audit: type=1334 audit(1789150191.800:1739): prog-id=480 op=UNLOAD Sep 11 18:09:51.805813 systemd[1]: Started sshd@74-4135-10.0.0.33:22-118.194.249.186:58796.service - OpenSSH per-connection server daemon (118.194.249.186:58796). Sep 11 18:09:51.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-4135-10.0.0.33:22-118.194.249.186:58796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:51.964457 systemd[1]: tmp-containerd\x2dmount2512623869.mount: Deactivated successfully. Sep 11 18:09:52.034031 containerd[2527]: time="2026-09-11T18:09:52.033470460Z" level=info msg="connecting to shim 6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566" address="unix:///run/containerd/s/52086aba887152648805c832a6c29f4c5e20c0535fd9b0aae0ad552c89fd744b" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:52.054168 systemd[1]: Started docker-6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566.scope - libcontainer container 6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566. Sep 11 18:09:52.061000 audit: BPF prog-id=481 op=LOAD Sep 11 18:09:52.062000 audit: BPF prog-id=482 op=LOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27f828631fd8 a2=98 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.062000 audit: BPF prog-id=482 op=UNLOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.062000 audit: BPF prog-id=483 op=LOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27f828632290 a2=98 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.062000 audit: BPF prog-id=484 op=LOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=27f828631fe8 a2=98 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.062000 audit: BPF prog-id=484 op=UNLOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.062000 audit: BPF prog-id=483 op=UNLOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.062000 audit: BPF prog-id=485 op=LOAD Sep 11 18:09:52.062000 audit[10762]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27f8286324f0 a2=98 a3=0 items=0 ppid=10752 pid=10762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36633062323838386163646562626439646534393564363665 Sep 11 18:09:52.085343 kernel: docker0: port 1(veth3703f29) entered blocking state Sep 11 18:09:52.085401 kernel: docker0: port 1(veth3703f29) entered disabled state Sep 11 18:09:52.086260 kernel: veth3703f29: entered allmulticast mode Sep 11 18:09:52.082000 audit: ANOM_PROMISCUOUS dev=veth3703f29 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:52.087388 kernel: veth3703f29: entered promiscuous mode Sep 11 18:09:52.082000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81143b8c0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.082000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:52.089226 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:52.089000 audit[10785]: NETFILTER_CFG table=raw:208 family=2 entries=1 op=nft_register_rule pid=10785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:52.089000 audit[10785]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff652044f0 a2=0 a3=0 items=0 ppid=2991 pid=10785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:52.089000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:52.090688 systemd-networkd[2304]: veth3703f29: Link UP Sep 11 18:09:52.099029 kernel: eth0: renamed from vethabca9aa Sep 11 18:09:52.102048 kernel: docker0: port 1(veth3703f29) entered blocking state Sep 11 18:09:52.102104 kernel: docker0: port 1(veth3703f29) entered forwarding state Sep 11 18:09:52.102183 systemd-networkd[2304]: veth3703f29: Gained carrier Sep 11 18:09:52.102642 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:52.112927 dockerd[2991]: time="2026-09-11T18:09:52.112775033Z" level=info msg="sbJoin: gwep4 ''->'441e3bd1d6ce', gwep6 ''->''" eid=441e3bd1d6ce ep=affectionate_easley net=bridge nid=ad3b593e9776 Sep 11 18:09:52.726324 sshd[10733]: Connection closed by authenticating user root 118.194.249.186 port 58796 [preauth] Sep 11 18:09:52.725000 audit[10733]: AUDIT1109 pid=10733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:52.728067 systemd[1]: sshd@74-4135-10.0.0.33:22-118.194.249.186:58796.service: Deactivated successfully. Sep 11 18:09:52.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-4135-10.0.0.33:22-118.194.249.186:58796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:52.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-37-10.0.0.33:22-118.194.249.186:44598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:52.971247 systemd[1]: Started sshd@75-37-10.0.0.33:22-118.194.249.186:44598.service - OpenSSH per-connection server daemon (118.194.249.186:44598). Sep 11 18:09:53.135521 systemd[1]: docker-6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566.scope: Deactivated successfully. Sep 11 18:09:53.147027 containerd[2527]: time="2026-09-11T18:09:53.146957887Z" level=info msg="shim disconnected" id=6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566 namespace=moby Sep 11 18:09:53.147410 containerd[2527]: time="2026-09-11T18:09:53.146999267Z" level=info msg="cleaning up after shim disconnected" id=6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566 namespace=moby Sep 11 18:09:53.147410 containerd[2527]: time="2026-09-11T18:09:53.147112937Z" level=info msg="cleaning up dead shim" id=6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566 namespace=moby Sep 11 18:09:53.147467 dockerd[2991]: time="2026-09-11T18:09:53.146994511Z" level=info msg="ignoring event" container=6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:53.170669 systemd-networkd[2304]: veth3703f29: Lost carrier Sep 11 18:09:53.171023 kernel: docker0: port 1(veth3703f29) entered disabled state Sep 11 18:09:53.172029 kernel: vethabca9aa: renamed from eth0 Sep 11 18:09:53.189000 audit[10823]: NETFILTER_CFG table=raw:209 family=2 entries=1 op=nft_unregister_rule pid=10823 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:53.189000 audit[10823]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe45213a90 a2=0 a3=0 items=0 ppid=2991 pid=10823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.189000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:53.193756 systemd-networkd[2304]: veth3703f29: Link DOWN Sep 11 18:09:53.196466 kernel: docker0: port 1(veth3703f29) entered disabled state Sep 11 18:09:53.196520 kernel: veth3703f29 (unregistering): left allmulticast mode Sep 11 18:09:53.197431 kernel: veth3703f29 (unregistering): left promiscuous mode Sep 11 18:09:53.198502 kernel: docker0: port 1(veth3703f29) entered disabled state Sep 11 18:09:53.192000 audit: ANOM_PROMISCUOUS dev=veth3703f29 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:53.192000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8110673a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.192000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:53.210174 systemd[1]: run-docker-netns-67f5aa5b8ee4.mount: Deactivated successfully. Sep 11 18:09:53.212804 systemd[1]: var-lib-docker-rootfs-overlayfs-6c0b2888acdebbd9de495d66eaa3e36413f28b14ef14ba254f5b6be2ec713566.mount: Deactivated successfully. Sep 11 18:09:53.225000 audit: BPF prog-id=481 op=UNLOAD Sep 11 18:09:53.225000 audit: BPF prog-id=485 op=UNLOAD Sep 11 18:09:53.365146 systemd[1]: tmp-containerd\x2dmount773501139.mount: Deactivated successfully. Sep 11 18:09:53.439482 containerd[2527]: time="2026-09-11T18:09:53.439404216Z" level=info msg="connecting to shim 83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7" address="unix:///run/containerd/s/a9edd000ebf21b5faaa8271917d6f30b9b9d1950af45d1c2b4519c582d89f7f0" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:53.458216 systemd[1]: Started docker-83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7.scope - libcontainer container 83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7. Sep 11 18:09:53.466000 audit: BPF prog-id=486 op=LOAD Sep 11 18:09:53.466000 audit: BPF prog-id=487 op=LOAD Sep 11 18:09:53.466000 audit[10852]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=285a6cc1ffd8 a2=98 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.466000 audit: BPF prog-id=487 op=UNLOAD Sep 11 18:09:53.466000 audit[10852]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.466000 audit: BPF prog-id=488 op=LOAD Sep 11 18:09:53.466000 audit[10852]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=285a6cc20290 a2=98 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.467000 audit: BPF prog-id=489 op=LOAD Sep 11 18:09:53.467000 audit[10852]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=285a6cc1ffe8 a2=98 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.467000 audit: BPF prog-id=489 op=UNLOAD Sep 11 18:09:53.467000 audit[10852]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.467000 audit: BPF prog-id=488 op=UNLOAD Sep 11 18:09:53.467000 audit[10852]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.467000 audit: BPF prog-id=490 op=LOAD Sep 11 18:09:53.467000 audit[10852]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=285a6cc204f0 a2=98 a3=0 items=0 ppid=10841 pid=10852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38336361376261356433643963646434316562626336663035 Sep 11 18:09:53.492265 kernel: docker0: port 1(vethbee95bd) entered blocking state Sep 11 18:09:53.491847 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:53.492405 kernel: docker0: port 1(vethbee95bd) entered disabled state Sep 11 18:09:53.488000 audit: ANOM_PROMISCUOUS dev=vethbee95bd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:53.494698 kernel: vethbee95bd: entered allmulticast mode Sep 11 18:09:53.494723 kernel: vethbee95bd: entered promiscuous mode Sep 11 18:09:53.488000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b67a70 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.488000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:53.497000 audit[10875]: NETFILTER_CFG table=raw:210 family=2 entries=1 op=nft_register_rule pid=10875 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:53.497000 audit[10875]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffca0426550 a2=0 a3=0 items=0 ppid=2991 pid=10875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:53.497000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:53.499291 systemd-networkd[2304]: vethbee95bd: Link UP Sep 11 18:09:53.508308 kernel: eth0: renamed from veth2731009 Sep 11 18:09:53.508360 kernel: docker0: port 1(vethbee95bd) entered blocking state Sep 11 18:09:53.508377 kernel: docker0: port 1(vethbee95bd) entered forwarding state Sep 11 18:09:53.508388 systemd-networkd[2304]: vethbee95bd: Gained carrier Sep 11 18:09:53.508831 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:53.516197 dockerd[2991]: time="2026-09-11T18:09:53.516176143Z" level=info msg="sbJoin: gwep4 ''->'87561570f5a2', gwep6 ''->''" eid=87561570f5a2 ep=focused_pascal net=bridge nid=ad3b593e9776 Sep 11 18:09:53.918637 sshd[10796]: Connection closed by authenticating user root 118.194.249.186 port 44598 [preauth] Sep 11 18:09:53.918000 audit[10796]: AUDIT1109 pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:53.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-37-10.0.0.33:22-118.194.249.186:44598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:53.920350 systemd[1]: sshd@75-37-10.0.0.33:22-118.194.249.186:44598.service: Deactivated successfully. Sep 11 18:09:54.146712 systemd[1]: Started sshd@76-4136-10.0.0.33:22-118.194.249.186:36584.service - OpenSSH per-connection server daemon (118.194.249.186:36584). Sep 11 18:09:54.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-4136-10.0.0.33:22-118.194.249.186:36584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:54.540020 systemd[1]: docker-83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7.scope: Deactivated successfully. Sep 11 18:09:54.552975 containerd[2527]: time="2026-09-11T18:09:54.552843167Z" level=info msg="shim disconnected" id=83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7 namespace=moby Sep 11 18:09:54.552975 containerd[2527]: time="2026-09-11T18:09:54.552915804Z" level=info msg="cleaning up after shim disconnected" id=83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7 namespace=moby Sep 11 18:09:54.552975 containerd[2527]: time="2026-09-11T18:09:54.552924867Z" level=info msg="cleaning up dead shim" id=83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7 namespace=moby Sep 11 18:09:54.553884 dockerd[2991]: time="2026-09-11T18:09:54.552921814Z" level=info msg="ignoring event" container=83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:54.579307 systemd-networkd[2304]: vethbee95bd: Lost carrier Sep 11 18:09:54.580086 kernel: docker0: port 1(vethbee95bd) entered disabled state Sep 11 18:09:54.580158 kernel: veth2731009: renamed from eth0 Sep 11 18:09:54.596000 audit[10913]: NETFILTER_CFG table=raw:211 family=2 entries=1 op=nft_unregister_rule pid=10913 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:54.596000 audit[10913]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd12926b10 a2=0 a3=0 items=0 ppid=2991 pid=10913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.596000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:54.603405 systemd-networkd[2304]: vethbee95bd: Link DOWN Sep 11 18:09:54.605026 kernel: docker0: port 1(vethbee95bd) entered disabled state Sep 11 18:09:54.602000 audit: ANOM_PROMISCUOUS dev=vethbee95bd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:54.608472 kernel: vethbee95bd (unregistering): left allmulticast mode Sep 11 18:09:54.608501 kernel: vethbee95bd (unregistering): left promiscuous mode Sep 11 18:09:54.608521 kernel: docker0: port 1(vethbee95bd) entered disabled state Sep 11 18:09:54.602000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffe2c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.602000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:54.644678 systemd[1]: run-docker-netns-cc91f64d415f.mount: Deactivated successfully. Sep 11 18:09:54.647739 systemd[1]: var-lib-docker-rootfs-overlayfs-83ca7ba5d3d9cdd41ebbc6f05cf0a066e36614730fe831caeb66962c53dcd8b7.mount: Deactivated successfully. Sep 11 18:09:54.658000 audit: BPF prog-id=486 op=UNLOAD Sep 11 18:09:54.658000 audit: BPF prog-id=490 op=UNLOAD Sep 11 18:09:54.828719 containerd[2527]: time="2026-09-11T18:09:54.828309803Z" level=info msg="connecting to shim fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732" address="unix:///run/containerd/s/d06b51092d74e158000adb8e67804405ac685d876e81ac1f5341fdb8bbccc47f" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:54.847158 systemd[1]: Started docker-fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732.scope - libcontainer container fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732. Sep 11 18:09:54.855000 audit: BPF prog-id=491 op=LOAD Sep 11 18:09:54.855000 audit: BPF prog-id=492 op=LOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=35ce5cde1fd8 a2=98 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.855000 audit: BPF prog-id=492 op=UNLOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.855000 audit: BPF prog-id=493 op=LOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=35ce5cde2290 a2=98 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.855000 audit: BPF prog-id=494 op=LOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=35ce5cde1fe8 a2=98 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.855000 audit: BPF prog-id=494 op=UNLOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.855000 audit: BPF prog-id=493 op=UNLOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.855000 audit: BPF prog-id=495 op=LOAD Sep 11 18:09:54.855000 audit[10942]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=35ce5cde24f0 a2=98 a3=0 items=0 ppid=10931 pid=10942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66633862383263656530386261313766393964333165626637 Sep 11 18:09:54.875509 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:54.877347 kernel: docker0: port 1(vethd321482) entered blocking state Sep 11 18:09:54.877398 kernel: docker0: port 1(vethd321482) entered disabled state Sep 11 18:09:54.878251 kernel: vethd321482: entered allmulticast mode Sep 11 18:09:54.879175 kernel: vethd321482: entered promiscuous mode Sep 11 18:09:54.874000 audit: ANOM_PROMISCUOUS dev=vethd321482 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:54.874000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c89d40 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.874000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:54.880000 audit[10963]: NETFILTER_CFG table=raw:212 family=2 entries=1 op=nft_register_rule pid=10963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:54.880000 audit[10963]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff047f7fa0 a2=0 a3=0 items=0 ppid=2991 pid=10963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:54.880000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:54.882195 systemd-networkd[2304]: vethd321482: Link UP Sep 11 18:09:54.890018 kernel: eth0: renamed from vethbce2cb6 Sep 11 18:09:54.890071 kernel: docker0: port 1(vethd321482) entered blocking state Sep 11 18:09:54.891392 kernel: docker0: port 1(vethd321482) entered forwarding state Sep 11 18:09:54.891733 systemd-networkd[2304]: vethd321482: Gained carrier Sep 11 18:09:54.891990 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:54.901025 dockerd[2991]: time="2026-09-11T18:09:54.899456393Z" level=info msg="sbJoin: gwep4 ''->'6ff600a2f47a', gwep6 ''->''" eid=6ff600a2f47a ep=magical_shamir net=bridge nid=ad3b593e9776 Sep 11 18:09:55.067520 sshd[10886]: Connection closed by authenticating user root 118.194.249.186 port 36584 [preauth] Sep 11 18:09:55.066000 audit[10886]: AUDIT1109 pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:55.069225 systemd[1]: sshd@76-4136-10.0.0.33:22-118.194.249.186:36584.service: Deactivated successfully. Sep 11 18:09:55.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-4136-10.0.0.33:22-118.194.249.186:36584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:55.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-4137-10.0.0.33:22-118.194.249.186:53692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:55.300250 systemd[1]: Started sshd@77-4137-10.0.0.33:22-118.194.249.186:53692.service - OpenSSH per-connection server daemon (118.194.249.186:53692). Sep 11 18:09:55.922790 systemd[1]: docker-fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732.scope: Deactivated successfully. Sep 11 18:09:55.935537 containerd[2527]: time="2026-09-11T18:09:55.935392703Z" level=info msg="shim disconnected" id=fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732 namespace=moby Sep 11 18:09:55.935537 containerd[2527]: time="2026-09-11T18:09:55.935423962Z" level=info msg="cleaning up after shim disconnected" id=fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732 namespace=moby Sep 11 18:09:55.935537 containerd[2527]: time="2026-09-11T18:09:55.935444788Z" level=info msg="cleaning up dead shim" id=fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732 namespace=moby Sep 11 18:09:55.936650 dockerd[2991]: time="2026-09-11T18:09:55.936606441Z" level=info msg="ignoring event" container=fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:55.958551 systemd-networkd[2304]: vethd321482: Lost carrier Sep 11 18:09:55.959087 kernel: docker0: port 1(vethd321482) entered disabled state Sep 11 18:09:55.959128 kernel: vethbce2cb6: renamed from eth0 Sep 11 18:09:55.977000 audit[10999]: NETFILTER_CFG table=raw:213 family=2 entries=1 op=nft_unregister_rule pid=10999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:55.977000 audit[10999]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffde0e33a70 a2=0 a3=0 items=0 ppid=2991 pid=10999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:55.977000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:55.982732 systemd-networkd[2304]: vethd321482: Link DOWN Sep 11 18:09:55.986102 kernel: docker0: port 1(vethd321482) entered disabled state Sep 11 18:09:55.986164 kernel: vethd321482 (unregistering): left allmulticast mode Sep 11 18:09:55.987179 kernel: vethd321482 (unregistering): left promiscuous mode Sep 11 18:09:55.981000 audit: ANOM_PROMISCUOUS dev=vethd321482 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:55.988368 kernel: docker0: port 1(vethd321482) entered disabled state Sep 11 18:09:55.981000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77480 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:55.981000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:55.996461 systemd[1]: run-docker-netns-78bca802ccb2.mount: Deactivated successfully. Sep 11 18:09:56.001233 systemd[1]: var-lib-docker-rootfs-overlayfs-fc8b82cee08ba17f99d31ebf7d45a76e34432b4cbd84c4e864bac72e1da36732.mount: Deactivated successfully. Sep 11 18:09:56.008000 audit: BPF prog-id=491 op=UNLOAD Sep 11 18:09:56.008000 audit: BPF prog-id=495 op=UNLOAD Sep 11 18:09:56.117896 systemd[1]: tmp-containerd\x2dmount3379026080.mount: Deactivated successfully. Sep 11 18:09:56.206743 containerd[2527]: time="2026-09-11T18:09:56.206108316Z" level=info msg="connecting to shim db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9" address="unix:///run/containerd/s/6068235f5fd7dafaed311afd5555f733ff6f1edb83def40518fd84c5108c69e4" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:56.221265 sshd[10974]: Connection closed by authenticating user root 118.194.249.186 port 53692 [preauth] Sep 11 18:09:56.220000 audit[10974]: AUDIT1109 pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:56.228189 systemd[1]: Started docker-db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9.scope - libcontainer container db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9. Sep 11 18:09:56.228512 systemd[1]: sshd@77-4137-10.0.0.33:22-118.194.249.186:53692.service: Deactivated successfully. Sep 11 18:09:56.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-4137-10.0.0.33:22-118.194.249.186:53692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:56.237000 audit: BPF prog-id=496 op=LOAD Sep 11 18:09:56.238000 audit: BPF prog-id=497 op=LOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=28cfc3db1fd8 a2=98 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.238000 audit: BPF prog-id=497 op=UNLOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.238000 audit: BPF prog-id=498 op=LOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=28cfc3db2290 a2=98 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.238000 audit: BPF prog-id=499 op=LOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=28cfc3db1fe8 a2=98 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.238000 audit: BPF prog-id=499 op=UNLOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.238000 audit: BPF prog-id=498 op=UNLOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.238000 audit: BPF prog-id=500 op=LOAD Sep 11 18:09:56.238000 audit[11027]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=28cfc3db24f0 a2=98 a3=0 items=0 ppid=11016 pid=11027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64623764653836643865653138363865333932336466306335 Sep 11 18:09:56.260690 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:56.263580 kernel: docker0: port 1(veth4404be4) entered blocking state Sep 11 18:09:56.263648 kernel: docker0: port 1(veth4404be4) entered disabled state Sep 11 18:09:56.266306 kernel: veth4404be4: entered allmulticast mode Sep 11 18:09:56.266363 kernel: veth4404be4: entered promiscuous mode Sep 11 18:09:56.259000 audit: ANOM_PROMISCUOUS dev=veth4404be4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:56.259000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f886f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.259000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:56.268000 audit[11049]: NETFILTER_CFG table=raw:214 family=2 entries=1 op=nft_register_rule pid=11049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:56.268000 audit[11049]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd89b04630 a2=0 a3=0 items=0 ppid=2991 pid=11049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:56.268000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:56.269838 systemd-networkd[2304]: veth4404be4: Link UP Sep 11 18:09:56.279084 kernel: eth0: renamed from vethd503578 Sep 11 18:09:56.279133 kernel: docker0: port 1(veth4404be4) entered blocking state Sep 11 18:09:56.279151 kernel: docker0: port 1(veth4404be4) entered forwarding state Sep 11 18:09:56.279483 systemd-networkd[2304]: veth4404be4: Gained carrier Sep 11 18:09:56.279672 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:56.287056 dockerd[2991]: time="2026-09-11T18:09:56.287030255Z" level=info msg="sbJoin: gwep4 ''->'6d6f5656b78f', gwep6 ''->''" eid=6d6f5656b78f ep=compassionate_kapitsa net=bridge nid=ad3b593e9776 Sep 11 18:09:56.466030 systemd[1]: Started sshd@78-38-10.0.0.33:22-118.194.249.186:40508.service - OpenSSH per-connection server daemon (118.194.249.186:40508). Sep 11 18:09:56.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-38-10.0.0.33:22-118.194.249.186:40508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:57.322434 systemd[1]: docker-db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9.scope: Deactivated successfully. Sep 11 18:09:57.335590 containerd[2527]: time="2026-09-11T18:09:57.335552714Z" level=info msg="shim disconnected" id=db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9 namespace=moby Sep 11 18:09:57.335590 containerd[2527]: time="2026-09-11T18:09:57.335587080Z" level=info msg="cleaning up after shim disconnected" id=db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9 namespace=moby Sep 11 18:09:57.336036 containerd[2527]: time="2026-09-11T18:09:57.335594740Z" level=info msg="cleaning up dead shim" id=db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9 namespace=moby Sep 11 18:09:57.336071 dockerd[2991]: time="2026-09-11T18:09:57.335753353Z" level=info msg="ignoring event" container=db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:57.357734 systemd-networkd[2304]: veth4404be4: Lost carrier Sep 11 18:09:57.358860 kernel: docker0: port 1(veth4404be4) entered disabled state Sep 11 18:09:57.358886 kernel: vethd503578: renamed from eth0 Sep 11 18:09:57.374000 audit[11083]: NETFILTER_CFG table=raw:215 family=2 entries=1 op=nft_unregister_rule pid=11083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:57.376642 kernel: kauditd_printk_skb: 149 callbacks suppressed Sep 11 18:09:57.376677 kernel: audit: type=1325 audit(1789150197.374:1805): table=raw:215 family=2 entries=1 op=nft_unregister_rule pid=11083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:57.374000 audit[11083]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdaea02ed0 a2=0 a3=0 items=0 ppid=2991 pid=11083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.381534 kernel: audit: type=1300 audit(1789150197.374:1805): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdaea02ed0 a2=0 a3=0 items=0 ppid=2991 pid=11083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.374000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:57.384032 kernel: audit: type=1327 audit(1789150197.374:1805): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:57.386502 systemd-networkd[2304]: veth4404be4: Link DOWN Sep 11 18:09:57.388020 kernel: docker0: port 1(veth4404be4) entered disabled state Sep 11 18:09:57.390133 kernel: veth4404be4 (unregistering): left allmulticast mode Sep 11 18:09:57.390696 kernel: veth4404be4 (unregistering): left promiscuous mode Sep 11 18:09:57.390723 kernel: docker0: port 1(veth4404be4) entered disabled state Sep 11 18:09:57.385000 audit: ANOM_PROMISCUOUS dev=veth4404be4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:57.391909 kernel: audit: type=1700 audit(1789150197.385:1806): dev=veth4404be4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:57.385000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8b040 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.385000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:57.406641 kernel: audit: type=1300 audit(1789150197.385:1806): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8b040 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.406690 kernel: audit: type=1327 audit(1789150197.385:1806): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:57.408993 systemd[1]: run-docker-netns-e9dcbadf955e.mount: Deactivated successfully. Sep 11 18:09:57.412412 sshd[11058]: Connection closed by authenticating user root 118.194.249.186 port 40508 [preauth] Sep 11 18:09:57.412858 systemd[1]: var-lib-docker-rootfs-overlayfs-db7de86d8ee1868e3923df0c572ab933d27c2a3b3f4139874b6b10054d3279b9.mount: Deactivated successfully. Sep 11 18:09:57.411000 audit[11058]: AUDIT1109 pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:57.414934 systemd[1]: sshd@78-38-10.0.0.33:22-118.194.249.186:40508.service: Deactivated successfully. Sep 11 18:09:57.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-38-10.0.0.33:22-118.194.249.186:40508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:57.422994 kernel: audit: type=1109 audit(1789150197.411:1807): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:57.423081 kernel: audit: type=1131 audit(1789150197.414:1808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-38-10.0.0.33:22-118.194.249.186:40508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:57.433000 audit: BPF prog-id=496 op=UNLOAD Sep 11 18:09:57.433000 audit: BPF prog-id=500 op=UNLOAD Sep 11 18:09:57.440707 kernel: audit: type=1334 audit(1789150197.433:1809): prog-id=496 op=UNLOAD Sep 11 18:09:57.440745 kernel: audit: type=1334 audit(1789150197.433:1810): prog-id=500 op=UNLOAD Sep 11 18:09:57.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-4138-10.0.0.33:22-118.194.249.186:59254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:57.651277 systemd[1]: Started sshd@79-4138-10.0.0.33:22-118.194.249.186:59254.service - OpenSSH per-connection server daemon (118.194.249.186:59254). Sep 11 18:09:57.661696 containerd[2527]: time="2026-09-11T18:09:57.661148445Z" level=info msg="connecting to shim 93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b" address="unix:///run/containerd/s/8918e28735104540aa61f4aab5313af7ef031711759a5aab383b338762045c1a" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:57.685196 systemd[1]: Started docker-93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b.scope - libcontainer container 93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b. Sep 11 18:09:57.693000 audit: BPF prog-id=501 op=LOAD Sep 11 18:09:57.693000 audit: BPF prog-id=502 op=LOAD Sep 11 18:09:57.693000 audit[11116]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2b6c1111bfd8 a2=98 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.693000 audit: BPF prog-id=502 op=UNLOAD Sep 11 18:09:57.693000 audit[11116]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.694000 audit: BPF prog-id=503 op=LOAD Sep 11 18:09:57.694000 audit[11116]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2b6c1111c290 a2=98 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.694000 audit: BPF prog-id=504 op=LOAD Sep 11 18:09:57.694000 audit[11116]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2b6c1111bfe8 a2=98 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.694000 audit: BPF prog-id=504 op=UNLOAD Sep 11 18:09:57.694000 audit[11116]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.694000 audit: BPF prog-id=503 op=UNLOAD Sep 11 18:09:57.694000 audit[11116]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.694000 audit: BPF prog-id=505 op=LOAD Sep 11 18:09:57.694000 audit[11116]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2b6c1111c4f0 a2=98 a3=0 items=0 ppid=11104 pid=11116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.694000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333834356236653930663931373965663564346233383364 Sep 11 18:09:57.720158 kernel: docker0: port 1(veth57a15ef) entered blocking state Sep 11 18:09:57.719953 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:57.720317 kernel: docker0: port 1(veth57a15ef) entered disabled state Sep 11 18:09:57.720337 kernel: veth57a15ef: entered allmulticast mode Sep 11 18:09:57.722286 kernel: veth57a15ef: entered promiscuous mode Sep 11 18:09:57.716000 audit: ANOM_PROMISCUOUS dev=veth57a15ef prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:57.716000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca812076a20 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:57.724000 audit[11137]: NETFILTER_CFG table=raw:216 family=2 entries=1 op=nft_register_rule pid=11137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:57.724000 audit[11137]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc55eb9b50 a2=0 a3=0 items=0 ppid=2991 pid=11137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:57.724000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:57.725590 systemd-networkd[2304]: veth57a15ef: Link UP Sep 11 18:09:57.736665 kernel: eth0: renamed from veth919c5b8 Sep 11 18:09:57.736723 kernel: docker0: port 1(veth57a15ef) entered blocking state Sep 11 18:09:57.736744 kernel: docker0: port 1(veth57a15ef) entered forwarding state Sep 11 18:09:57.736733 systemd-networkd[2304]: veth57a15ef: Gained carrier Sep 11 18:09:57.737179 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:57.744228 dockerd[2991]: time="2026-09-11T18:09:57.744203860Z" level=info msg="sbJoin: gwep4 ''->'9014a071f35d', gwep6 ''->''" eid=9014a071f35d ep=vigilant_lichterman net=bridge nid=ad3b593e9776 Sep 11 18:09:58.604631 sshd[11095]: Connection closed by authenticating user root 118.194.249.186 port 59254 [preauth] Sep 11 18:09:58.604000 audit[11095]: AUDIT1109 pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:58.606092 systemd[1]: sshd@79-4138-10.0.0.33:22-118.194.249.186:59254.service: Deactivated successfully. Sep 11 18:09:58.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-4138-10.0.0.33:22-118.194.249.186:59254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:58.766312 systemd[1]: docker-93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b.scope: Deactivated successfully. Sep 11 18:09:58.779374 dockerd[2991]: time="2026-09-11T18:09:58.779324710Z" level=info msg="ignoring event" container=93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:09:58.779900 containerd[2527]: time="2026-09-11T18:09:58.779735275Z" level=info msg="shim disconnected" id=93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b namespace=moby Sep 11 18:09:58.779900 containerd[2527]: time="2026-09-11T18:09:58.779899641Z" level=info msg="cleaning up after shim disconnected" id=93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b namespace=moby Sep 11 18:09:58.780233 containerd[2527]: time="2026-09-11T18:09:58.779912398Z" level=info msg="cleaning up dead shim" id=93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b namespace=moby Sep 11 18:09:58.809959 systemd-networkd[2304]: veth57a15ef: Lost carrier Sep 11 18:09:58.810478 kernel: docker0: port 1(veth57a15ef) entered disabled state Sep 11 18:09:58.810509 kernel: veth919c5b8: renamed from eth0 Sep 11 18:09:58.829000 audit[11169]: NETFILTER_CFG table=raw:217 family=2 entries=1 op=nft_unregister_rule pid=11169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:58.829000 audit[11169]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd5db34df0 a2=0 a3=0 items=0 ppid=2991 pid=11169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:58.829000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:58.838026 kernel: docker0: port 1(veth57a15ef) entered disabled state Sep 11 18:09:58.838220 systemd-networkd[2304]: veth57a15ef: Link DOWN Sep 11 18:09:58.835000 audit: ANOM_PROMISCUOUS dev=veth57a15ef prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:58.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-4139-10.0.0.33:22-118.194.249.186:50016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:09:58.841046 systemd[1]: Started sshd@80-4139-10.0.0.33:22-118.194.249.186:50016.service - OpenSSH per-connection server daemon (118.194.249.186:50016). Sep 11 18:09:58.842427 kernel: veth57a15ef (unregistering): left allmulticast mode Sep 11 18:09:58.842454 kernel: veth57a15ef (unregistering): left promiscuous mode Sep 11 18:09:58.842472 kernel: docker0: port 1(veth57a15ef) entered disabled state Sep 11 18:09:58.835000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e09c0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:58.835000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:58.850839 systemd[1]: run-docker-netns-009a73fde471.mount: Deactivated successfully. Sep 11 18:09:58.854801 systemd[1]: var-lib-docker-rootfs-overlayfs-93845b6e90f9179ef5d4b383d10a99d2174f989bfc983fceb62c9f0056c9076b.mount: Deactivated successfully. Sep 11 18:09:58.864000 audit: BPF prog-id=501 op=UNLOAD Sep 11 18:09:58.864000 audit: BPF prog-id=505 op=UNLOAD Sep 11 18:09:58.966121 systemd[1]: tmp-containerd\x2dmount2694056236.mount: Deactivated successfully. Sep 11 18:09:59.033023 containerd[2527]: time="2026-09-11T18:09:59.032915369Z" level=info msg="connecting to shim aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4" address="unix:///run/containerd/s/16559594894a8e33ad517e8a1be5d94cb9c4b39575e5002c650b73ad2c568be8" namespace=moby protocol=ttrpc version=3 Sep 11 18:09:59.053176 systemd[1]: Started docker-aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4.scope - libcontainer container aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4. Sep 11 18:09:59.060000 audit: BPF prog-id=506 op=LOAD Sep 11 18:09:59.061000 audit: BPF prog-id=507 op=LOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=274e0ab23fd8 a2=98 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.061000 audit: BPF prog-id=507 op=UNLOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.061000 audit: BPF prog-id=508 op=LOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=274e0ab24290 a2=98 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.061000 audit: BPF prog-id=509 op=LOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=274e0ab23fe8 a2=98 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.061000 audit: BPF prog-id=509 op=UNLOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.061000 audit: BPF prog-id=508 op=UNLOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.061000 audit: BPF prog-id=510 op=LOAD Sep 11 18:09:59.061000 audit[11202]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=274e0ab244f0 a2=98 a3=0 items=0 ppid=11191 pid=11202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61613535343566366265636366356432393431373161383836 Sep 11 18:09:59.083785 kernel: docker0: port 1(vethf4ccee5) entered blocking state Sep 11 18:09:59.083854 kernel: docker0: port 1(vethf4ccee5) entered disabled state Sep 11 18:09:59.084732 kernel: vethf4ccee5: entered allmulticast mode Sep 11 18:09:59.080000 audit: ANOM_PROMISCUOUS dev=vethf4ccee5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:09:59.085761 kernel: vethf4ccee5: entered promiscuous mode Sep 11 18:09:59.080000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e74a0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.080000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:09:59.086197 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:09:59.087000 audit[11223]: NETFILTER_CFG table=raw:218 family=2 entries=1 op=nft_register_rule pid=11223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:09:59.087000 audit[11223]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd61e18d70 a2=0 a3=0 items=0 ppid=2991 pid=11223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:09:59.087000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:09:59.088786 systemd-networkd[2304]: vethf4ccee5: Link UP Sep 11 18:09:59.099403 kernel: eth0: renamed from vethb42f583 Sep 11 18:09:59.099466 kernel: docker0: port 1(vethf4ccee5) entered blocking state Sep 11 18:09:59.099489 kernel: docker0: port 1(vethf4ccee5) entered forwarding state Sep 11 18:09:59.099570 systemd-networkd[2304]: vethf4ccee5: Gained carrier Sep 11 18:09:59.100505 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:09:59.108567 dockerd[2991]: time="2026-09-11T18:09:59.108519204Z" level=info msg="sbJoin: gwep4 ''->'d5c968e9f731', gwep6 ''->''" eid=d5c968e9f731 ep=angry_tharp net=bridge nid=ad3b593e9776 Sep 11 18:09:59.775991 sshd[11171]: Connection closed by authenticating user root 118.194.249.186 port 50016 [preauth] Sep 11 18:09:59.775000 audit[11171]: AUDIT1109 pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:09:59.777238 systemd[1]: sshd@80-4139-10.0.0.33:22-118.194.249.186:50016.service: Deactivated successfully. Sep 11 18:09:59.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-4139-10.0.0.33:22-118.194.249.186:50016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:00.021756 systemd[1]: Started sshd@81-4140-10.0.0.33:22-118.194.249.186:37714.service - OpenSSH per-connection server daemon (118.194.249.186:37714). Sep 11 18:10:00.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-4140-10.0.0.33:22-118.194.249.186:37714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:00.133106 systemd[1]: docker-aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4.scope: Deactivated successfully. Sep 11 18:10:00.145606 dockerd[2991]: time="2026-09-11T18:10:00.145571877Z" level=info msg="ignoring event" container=aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:00.146237 containerd[2527]: time="2026-09-11T18:10:00.146096188Z" level=info msg="shim disconnected" id=aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4 namespace=moby Sep 11 18:10:00.146237 containerd[2527]: time="2026-09-11T18:10:00.146127869Z" level=info msg="cleaning up after shim disconnected" id=aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4 namespace=moby Sep 11 18:10:00.146237 containerd[2527]: time="2026-09-11T18:10:00.146135584Z" level=info msg="cleaning up dead shim" id=aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4 namespace=moby Sep 11 18:10:00.175179 systemd-networkd[2304]: vethf4ccee5: Lost carrier Sep 11 18:10:00.176030 kernel: docker0: port 1(vethf4ccee5) entered disabled state Sep 11 18:10:00.176059 kernel: vethb42f583: renamed from eth0 Sep 11 18:10:00.192000 audit[11259]: NETFILTER_CFG table=raw:219 family=2 entries=1 op=nft_unregister_rule pid=11259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:00.192000 audit[11259]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff42e2c380 a2=0 a3=0 items=0 ppid=2991 pid=11259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.192000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:00.200455 systemd-networkd[2304]: vethf4ccee5: Link DOWN Sep 11 18:10:00.203029 kernel: docker0: port 1(vethf4ccee5) entered disabled state Sep 11 18:10:00.203271 kernel: vethf4ccee5 (unregistering): left allmulticast mode Sep 11 18:10:00.205164 kernel: vethf4ccee5 (unregistering): left promiscuous mode Sep 11 18:10:00.205244 kernel: docker0: port 1(vethf4ccee5) entered disabled state Sep 11 18:10:00.199000 audit: ANOM_PROMISCUOUS dev=vethf4ccee5 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:00.199000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbaaa0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.199000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:00.214554 systemd[1]: run-docker-netns-1e715d70a2bc.mount: Deactivated successfully. Sep 11 18:10:00.219041 systemd[1]: var-lib-docker-rootfs-overlayfs-aa5545f6beccf5d294171a886b87fda6f7686668bdd67c4b9452de6d8df73be4.mount: Deactivated successfully. Sep 11 18:10:00.225000 audit: BPF prog-id=506 op=UNLOAD Sep 11 18:10:00.225000 audit: BPF prog-id=510 op=UNLOAD Sep 11 18:10:00.421562 containerd[2527]: time="2026-09-11T18:10:00.421474726Z" level=info msg="connecting to shim 315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac" address="unix:///run/containerd/s/1d2c42ea1c4c95dc6d545891349a8c902b05688b1cf4ac074014a76a097225cb" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:00.445171 systemd[1]: Started docker-315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac.scope - libcontainer container 315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac. Sep 11 18:10:00.452000 audit: BPF prog-id=511 op=LOAD Sep 11 18:10:00.452000 audit: BPF prog-id=512 op=LOAD Sep 11 18:10:00.452000 audit[11287]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ed8608f3fd8 a2=98 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.452000 audit: BPF prog-id=512 op=UNLOAD Sep 11 18:10:00.452000 audit[11287]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.452000 audit: BPF prog-id=513 op=LOAD Sep 11 18:10:00.452000 audit[11287]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ed8608f4290 a2=98 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.453000 audit: BPF prog-id=514 op=LOAD Sep 11 18:10:00.453000 audit[11287]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3ed8608f3fe8 a2=98 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.453000 audit: BPF prog-id=514 op=UNLOAD Sep 11 18:10:00.453000 audit[11287]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.453000 audit: BPF prog-id=513 op=UNLOAD Sep 11 18:10:00.453000 audit[11287]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.453000 audit: BPF prog-id=515 op=LOAD Sep 11 18:10:00.453000 audit[11287]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ed8608f44f0 a2=98 a3=0 items=0 ppid=11276 pid=11287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313535333662303830353663303339303034653836636335 Sep 11 18:10:00.475578 kernel: docker0: port 1(veth2635597) entered blocking state Sep 11 18:10:00.475545 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:00.475742 kernel: docker0: port 1(veth2635597) entered disabled state Sep 11 18:10:00.472000 audit: ANOM_PROMISCUOUS dev=veth2635597 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:00.472000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e6c90 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.472000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:00.479046 kernel: veth2635597: entered allmulticast mode Sep 11 18:10:00.479075 kernel: veth2635597: entered promiscuous mode Sep 11 18:10:00.479000 audit[11308]: NETFILTER_CFG table=raw:220 family=2 entries=1 op=nft_register_rule pid=11308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:00.479000 audit[11308]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffc5301040 a2=0 a3=0 items=0 ppid=2991 pid=11308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:00.479000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:00.481070 systemd-networkd[2304]: veth2635597: Link UP Sep 11 18:10:00.499119 kernel: eth0: renamed from veth9be7cc9 Sep 11 18:10:00.499534 kernel: docker0: port 1(veth2635597) entered blocking state Sep 11 18:10:00.499223 systemd-networkd[2304]: veth2635597: Gained carrier Sep 11 18:10:00.499620 kernel: docker0: port 1(veth2635597) entered forwarding state Sep 11 18:10:00.499428 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:00.512499 dockerd[2991]: time="2026-09-11T18:10:00.512467905Z" level=info msg="sbJoin: gwep4 ''->'c486d95d4b68', gwep6 ''->''" eid=c486d95d4b68 ep=charming_mccarthy net=bridge nid=ad3b593e9776 Sep 11 18:10:00.974894 sshd[11234]: Connection closed by authenticating user root 118.194.249.186 port 37714 [preauth] Sep 11 18:10:00.974000 audit[11234]: AUDIT1109 pid=11234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:00.976638 systemd[1]: sshd@81-4140-10.0.0.33:22-118.194.249.186:37714.service: Deactivated successfully. Sep 11 18:10:00.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-4140-10.0.0.33:22-118.194.249.186:37714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:01.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-39-10.0.0.33:22-118.194.249.186:51810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:01.202360 systemd[1]: Started sshd@82-39-10.0.0.33:22-118.194.249.186:51810.service - OpenSSH per-connection server daemon (118.194.249.186:51810). Sep 11 18:10:01.541331 systemd[1]: docker-315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac.scope: Deactivated successfully. Sep 11 18:10:01.554405 dockerd[2991]: time="2026-09-11T18:10:01.554370424Z" level=info msg="ignoring event" container=315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:01.555300 containerd[2527]: time="2026-09-11T18:10:01.554872285Z" level=info msg="shim disconnected" id=315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac namespace=moby Sep 11 18:10:01.555300 containerd[2527]: time="2026-09-11T18:10:01.554910896Z" level=info msg="cleaning up after shim disconnected" id=315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac namespace=moby Sep 11 18:10:01.555300 containerd[2527]: time="2026-09-11T18:10:01.554921619Z" level=info msg="cleaning up dead shim" id=315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac namespace=moby Sep 11 18:10:01.582587 systemd-networkd[2304]: veth2635597: Lost carrier Sep 11 18:10:01.583199 kernel: docker0: port 1(veth2635597) entered disabled state Sep 11 18:10:01.583235 kernel: veth9be7cc9: renamed from eth0 Sep 11 18:10:01.604000 audit[11346]: NETFILTER_CFG table=raw:221 family=2 entries=1 op=nft_unregister_rule pid=11346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:01.604000 audit[11346]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd5e65eb20 a2=0 a3=0 items=0 ppid=2991 pid=11346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.604000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:01.612415 systemd-networkd[2304]: veth2635597: Link DOWN Sep 11 18:10:01.615715 kernel: docker0: port 1(veth2635597) entered disabled state Sep 11 18:10:01.615774 kernel: veth2635597 (unregistering): left allmulticast mode Sep 11 18:10:01.615794 kernel: veth2635597 (unregistering): left promiscuous mode Sep 11 18:10:01.611000 audit: ANOM_PROMISCUOUS dev=veth2635597 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:01.616541 kernel: docker0: port 1(veth2635597) entered disabled state Sep 11 18:10:01.611000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbb200 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.611000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:01.628516 systemd[1]: run-docker-netns-a242a2f61589.mount: Deactivated successfully. Sep 11 18:10:01.632342 systemd[1]: var-lib-docker-rootfs-overlayfs-315536b08056c039004e86cc5e39b4e56ff9f0d938495f2d36a3230bd394cdac.mount: Deactivated successfully. Sep 11 18:10:01.637000 audit: BPF prog-id=511 op=UNLOAD Sep 11 18:10:01.637000 audit: BPF prog-id=515 op=UNLOAD Sep 11 18:10:01.776968 systemd[1]: tmp-containerd\x2dmount4020069283.mount: Deactivated successfully. Sep 11 18:10:01.845531 containerd[2527]: time="2026-09-11T18:10:01.845073495Z" level=info msg="connecting to shim 1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759" address="unix:///run/containerd/s/af801c1794e82e09cd703f2d5b133875a539e886d98c1de1025beaf3baf8db97" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:01.870184 systemd[1]: Started docker-1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759.scope - libcontainer container 1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759. Sep 11 18:10:01.878000 audit: BPF prog-id=516 op=LOAD Sep 11 18:10:01.878000 audit: BPF prog-id=517 op=LOAD Sep 11 18:10:01.878000 audit[11373]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e5b89515fd8 a2=98 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.878000 audit: BPF prog-id=517 op=UNLOAD Sep 11 18:10:01.878000 audit[11373]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.878000 audit: BPF prog-id=518 op=LOAD Sep 11 18:10:01.878000 audit[11373]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e5b89516290 a2=98 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.878000 audit: BPF prog-id=519 op=LOAD Sep 11 18:10:01.878000 audit[11373]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=e5b89515fe8 a2=98 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.879000 audit: BPF prog-id=519 op=UNLOAD Sep 11 18:10:01.879000 audit[11373]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.879000 audit: BPF prog-id=518 op=UNLOAD Sep 11 18:10:01.879000 audit[11373]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.879000 audit: BPF prog-id=520 op=LOAD Sep 11 18:10:01.879000 audit[11373]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e5b895164f0 a2=98 a3=0 items=0 ppid=11363 pid=11373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.879000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656135653332663762396166313433656136653566353262 Sep 11 18:10:01.908040 kernel: docker0: port 1(veth9f01879) entered blocking state Sep 11 18:10:01.908157 kernel: docker0: port 1(veth9f01879) entered disabled state Sep 11 18:10:01.908094 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:01.910066 kernel: veth9f01879: entered allmulticast mode Sep 11 18:10:01.903000 audit: ANOM_PROMISCUOUS dev=veth9f01879 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:01.910226 kernel: veth9f01879: entered promiscuous mode Sep 11 18:10:01.903000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811d02900 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.903000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:01.912000 audit[11398]: NETFILTER_CFG table=raw:222 family=2 entries=1 op=nft_register_rule pid=11398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:01.912000 audit[11398]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe106a8360 a2=0 a3=0 items=0 ppid=2991 pid=11398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:01.912000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:01.913483 systemd-networkd[2304]: veth9f01879: Link UP Sep 11 18:10:01.922262 kernel: eth0: renamed from vethf1b18c5 Sep 11 18:10:01.922321 kernel: docker0: port 1(veth9f01879) entered blocking state Sep 11 18:10:01.923225 kernel: docker0: port 1(veth9f01879) entered forwarding state Sep 11 18:10:01.923424 systemd-networkd[2304]: veth9f01879: Gained carrier Sep 11 18:10:01.924031 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:01.933029 dockerd[2991]: time="2026-09-11T18:10:01.932695183Z" level=info msg="sbJoin: gwep4 ''->'fb713e27e70a', gwep6 ''->''" eid=fb713e27e70a ep=dazzling_margulis net=bridge nid=ad3b593e9776 Sep 11 18:10:02.123206 sshd[11320]: Connection closed by authenticating user root 118.194.249.186 port 51810 [preauth] Sep 11 18:10:02.122000 audit[11320]: AUDIT1109 pid=11320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:02.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-39-10.0.0.33:22-118.194.249.186:51810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:02.124767 systemd[1]: sshd@82-39-10.0.0.33:22-118.194.249.186:51810.service: Deactivated successfully. Sep 11 18:10:02.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-40-10.0.0.33:22-118.194.249.186:56000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:02.369279 systemd[1]: Started sshd@83-40-10.0.0.33:22-118.194.249.186:56000.service - OpenSSH per-connection server daemon (118.194.249.186:56000). Sep 11 18:10:02.956164 systemd[1]: docker-1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759.scope: Deactivated successfully. Sep 11 18:10:02.969541 dockerd[2991]: time="2026-09-11T18:10:02.969455891Z" level=info msg="ignoring event" container=1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:02.970109 containerd[2527]: time="2026-09-11T18:10:02.969780043Z" level=info msg="shim disconnected" id=1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759 namespace=moby Sep 11 18:10:02.970109 containerd[2527]: time="2026-09-11T18:10:02.969811402Z" level=info msg="cleaning up after shim disconnected" id=1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759 namespace=moby Sep 11 18:10:02.970109 containerd[2527]: time="2026-09-11T18:10:02.969819440Z" level=info msg="cleaning up dead shim" id=1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759 namespace=moby Sep 11 18:10:02.996934 systemd-networkd[2304]: veth9f01879: Lost carrier Sep 11 18:10:02.997778 kernel: docker0: port 1(veth9f01879) entered disabled state Sep 11 18:10:02.997805 kernel: vethf1b18c5: renamed from eth0 Sep 11 18:10:03.011000 audit[11434]: NETFILTER_CFG table=raw:223 family=2 entries=1 op=nft_unregister_rule pid=11434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:03.013523 kernel: kauditd_printk_skb: 149 callbacks suppressed Sep 11 18:10:03.013563 kernel: audit: type=1325 audit(1789150203.011:1876): table=raw:223 family=2 entries=1 op=nft_unregister_rule pid=11434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:03.011000 audit[11434]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc7541fa30 a2=0 a3=0 items=0 ppid=2991 pid=11434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.020985 kernel: audit: type=1300 audit(1789150203.011:1876): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc7541fa30 a2=0 a3=0 items=0 ppid=2991 pid=11434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.011000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:03.024258 systemd-networkd[2304]: veth9f01879: Link DOWN Sep 11 18:10:03.024969 kernel: audit: type=1327 audit(1789150203.011:1876): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:03.024997 kernel: docker0: port 1(veth9f01879) entered disabled state Sep 11 18:10:03.026040 kernel: veth9f01879 (unregistering): left allmulticast mode Sep 11 18:10:03.028079 kernel: veth9f01879 (unregistering): left promiscuous mode Sep 11 18:10:03.029072 kernel: docker0: port 1(veth9f01879) entered disabled state Sep 11 18:10:03.016000 audit: ANOM_PROMISCUOUS dev=veth9f01879 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:03.030988 kernel: audit: type=1700 audit(1789150203.016:1877): dev=veth9f01879 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:03.016000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffefa0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.016000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:03.042729 systemd[1]: run-docker-netns-5004a73f0dfe.mount: Deactivated successfully. Sep 11 18:10:03.045760 kernel: audit: type=1300 audit(1789150203.016:1877): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffefa0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.045792 kernel: audit: type=1327 audit(1789150203.016:1877): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:03.050865 systemd[1]: var-lib-docker-rootfs-overlayfs-1ea5e32f7b9af143ea6e5f52b8ce45336e214ba4f9fe1fa7f9d910c48c575759.mount: Deactivated successfully. Sep 11 18:10:03.054000 audit: BPF prog-id=516 op=UNLOAD Sep 11 18:10:03.054000 audit: BPF prog-id=520 op=UNLOAD Sep 11 18:10:03.057317 kernel: audit: type=1334 audit(1789150203.054:1878): prog-id=516 op=UNLOAD Sep 11 18:10:03.057354 kernel: audit: type=1334 audit(1789150203.054:1879): prog-id=520 op=UNLOAD Sep 11 18:10:03.181475 systemd[1]: tmp-containerd\x2dmount978347543.mount: Deactivated successfully. Sep 11 18:10:03.257049 containerd[2527]: time="2026-09-11T18:10:03.256499407Z" level=info msg="connecting to shim 4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872" address="unix:///run/containerd/s/bfda06fb0a125ca243144f271e8efc1f95b026b002b69fbbd0c0ccf79f674336" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:03.280202 systemd[1]: Started docker-4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872.scope - libcontainer container 4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872. Sep 11 18:10:03.288000 audit: BPF prog-id=521 op=LOAD Sep 11 18:10:03.288000 audit: BPF prog-id=522 op=LOAD Sep 11 18:10:03.292464 kernel: audit: type=1334 audit(1789150203.288:1880): prog-id=521 op=LOAD Sep 11 18:10:03.292514 kernel: audit: type=1334 audit(1789150203.288:1881): prog-id=522 op=LOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c062cb31fd8 a2=98 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.288000 audit: BPF prog-id=522 op=UNLOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.288000 audit: BPF prog-id=523 op=LOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c062cb32290 a2=98 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.288000 audit: BPF prog-id=524 op=LOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1c062cb31fe8 a2=98 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.288000 audit: BPF prog-id=524 op=UNLOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.288000 audit: BPF prog-id=523 op=UNLOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.288000 audit: BPF prog-id=525 op=LOAD Sep 11 18:10:03.288000 audit[11462]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c062cb324f0 a2=98 a3=0 items=0 ppid=11452 pid=11462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34623161663132353534333738373630323731336135363934 Sep 11 18:10:03.318018 kernel: docker0: port 1(veth1f483f0) entered blocking state Sep 11 18:10:03.318080 kernel: docker0: port 1(veth1f483f0) entered disabled state Sep 11 18:10:03.320020 kernel: veth1f483f0: entered allmulticast mode Sep 11 18:10:03.312000 audit: ANOM_PROMISCUOUS dev=veth1f483f0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:03.321570 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:03.322030 kernel: veth1f483f0: entered promiscuous mode Sep 11 18:10:03.312000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811d03a10 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.312000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:03.323572 sshd[11409]: Connection closed by authenticating user root 118.194.249.186 port 56000 [preauth] Sep 11 18:10:03.322000 audit[11483]: NETFILTER_CFG table=raw:224 family=2 entries=1 op=nft_register_rule pid=11483 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:03.322000 audit[11483]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdb1d7caf0 a2=0 a3=0 items=0 ppid=2991 pid=11483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:03.322000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:03.324323 systemd-networkd[2304]: veth1f483f0: Link UP Sep 11 18:10:03.324000 audit[11409]: AUDIT1109 pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:03.327244 systemd[1]: sshd@83-40-10.0.0.33:22-118.194.249.186:56000.service: Deactivated successfully. Sep 11 18:10:03.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-40-10.0.0.33:22-118.194.249.186:56000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:03.333028 kernel: eth0: renamed from veth58911e6 Sep 11 18:10:03.335775 kernel: docker0: port 1(veth1f483f0) entered blocking state Sep 11 18:10:03.335648 systemd-networkd[2304]: veth1f483f0: Gained carrier Sep 11 18:10:03.335889 kernel: docker0: port 1(veth1f483f0) entered forwarding state Sep 11 18:10:03.336033 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:03.347211 dockerd[2991]: time="2026-09-11T18:10:03.347188128Z" level=info msg="sbJoin: gwep4 ''->'89dbeeb0f6ea', gwep6 ''->''" eid=89dbeeb0f6ea ep=determined_engelbart net=bridge nid=ad3b593e9776 Sep 11 18:10:03.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-41-10.0.0.33:22-118.194.249.186:39916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:03.553241 systemd[1]: Started sshd@84-41-10.0.0.33:22-118.194.249.186:39916.service - OpenSSH per-connection server daemon (118.194.249.186:39916). Sep 11 18:10:04.374877 systemd[1]: docker-4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872.scope: Deactivated successfully. Sep 11 18:10:04.387635 dockerd[2991]: time="2026-09-11T18:10:04.387589825Z" level=info msg="ignoring event" container=4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:04.387941 containerd[2527]: time="2026-09-11T18:10:04.387835831Z" level=info msg="shim disconnected" id=4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872 namespace=moby Sep 11 18:10:04.387941 containerd[2527]: time="2026-09-11T18:10:04.387866946Z" level=info msg="cleaning up after shim disconnected" id=4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872 namespace=moby Sep 11 18:10:04.387941 containerd[2527]: time="2026-09-11T18:10:04.387874017Z" level=info msg="cleaning up dead shim" id=4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872 namespace=moby Sep 11 18:10:04.416230 kernel: docker0: port 1(veth1f483f0) entered disabled state Sep 11 18:10:04.416026 systemd-networkd[2304]: veth1f483f0: Lost carrier Sep 11 18:10:04.418031 kernel: veth58911e6: renamed from eth0 Sep 11 18:10:04.444000 audit[11520]: NETFILTER_CFG table=raw:225 family=2 entries=1 op=nft_unregister_rule pid=11520 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:04.444000 audit[11520]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe15cf43d0 a2=0 a3=0 items=0 ppid=2991 pid=11520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.444000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:04.450829 systemd-networkd[2304]: veth1f483f0: Link DOWN Sep 11 18:10:04.452150 kernel: docker0: port 1(veth1f483f0) entered disabled state Sep 11 18:10:04.452406 kernel: veth1f483f0 (unregistering): left allmulticast mode Sep 11 18:10:04.454629 kernel: veth1f483f0 (unregistering): left promiscuous mode Sep 11 18:10:04.449000 audit: ANOM_PROMISCUOUS dev=veth1f483f0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:04.456140 kernel: docker0: port 1(veth1f483f0) entered disabled state Sep 11 18:10:04.449000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8a820 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.449000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:04.467169 systemd[1]: run-docker-netns-85aa7a91d5bd.mount: Deactivated successfully. Sep 11 18:10:04.469556 systemd[1]: var-lib-docker-rootfs-overlayfs-4b1af125543787602713a5694a9479f3af4866eb9262ad0ce38006aaad9e0872.mount: Deactivated successfully. Sep 11 18:10:04.478000 audit: BPF prog-id=521 op=UNLOAD Sep 11 18:10:04.478000 audit: BPF prog-id=525 op=UNLOAD Sep 11 18:10:04.482381 sshd[11495]: Connection closed by authenticating user root 118.194.249.186 port 39916 [preauth] Sep 11 18:10:04.481000 audit[11495]: AUDIT1109 pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:04.484196 systemd[1]: sshd@84-41-10.0.0.33:22-118.194.249.186:39916.service: Deactivated successfully. Sep 11 18:10:04.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-41-10.0.0.33:22-118.194.249.186:39916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:04.621830 systemd[1]: tmp-containerd\x2dmount2211832435.mount: Deactivated successfully. Sep 11 18:10:04.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-4141-10.0.0.33:22-118.194.249.186:50224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:04.732565 systemd[1]: Started sshd@85-4141-10.0.0.33:22-118.194.249.186:50224.service - OpenSSH per-connection server daemon (118.194.249.186:50224). Sep 11 18:10:04.736524 containerd[2527]: time="2026-09-11T18:10:04.736486970Z" level=info msg="connecting to shim aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4" address="unix:///run/containerd/s/28305acd7a67f576d249b7127d2954f9534fb66d2720954f8074899c171bc639" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:04.754194 systemd[1]: Started docker-aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4.scope - libcontainer container aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4. Sep 11 18:10:04.765000 audit: BPF prog-id=526 op=LOAD Sep 11 18:10:04.765000 audit: BPF prog-id=527 op=LOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e4db82a9fd8 a2=98 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.765000 audit: BPF prog-id=527 op=UNLOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.765000 audit: BPF prog-id=528 op=LOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e4db82aa290 a2=98 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.765000 audit: BPF prog-id=529 op=LOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=e4db82a9fe8 a2=98 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.765000 audit: BPF prog-id=529 op=UNLOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.765000 audit: BPF prog-id=528 op=UNLOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.765000 audit: BPF prog-id=530 op=LOAD Sep 11 18:10:04.765000 audit[11553]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e4db82aa4f0 a2=98 a3=0 items=0 ppid=11542 pid=11553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61616439393733373236643731386635326465636239383738 Sep 11 18:10:04.790736 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:04.793029 kernel: docker0: port 1(veth3a922f6) entered blocking state Sep 11 18:10:04.793089 kernel: docker0: port 1(veth3a922f6) entered disabled state Sep 11 18:10:04.793113 kernel: veth3a922f6: entered allmulticast mode Sep 11 18:10:04.793130 kernel: veth3a922f6: entered promiscuous mode Sep 11 18:10:04.788000 audit: ANOM_PROMISCUOUS dev=veth3a922f6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:04.788000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca81155f920 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.788000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:04.797000 audit[11575]: NETFILTER_CFG table=raw:226 family=2 entries=1 op=nft_register_rule pid=11575 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:04.797000 audit[11575]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe1a2de810 a2=0 a3=0 items=0 ppid=2991 pid=11575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:04.797000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:04.798358 systemd-networkd[2304]: veth3a922f6: Link UP Sep 11 18:10:04.807536 kernel: eth0: renamed from vethd1af691 Sep 11 18:10:04.807592 kernel: docker0: port 1(veth3a922f6) entered blocking state Sep 11 18:10:04.807690 kernel: docker0: port 1(veth3a922f6) entered forwarding state Sep 11 18:10:04.807613 systemd-networkd[2304]: veth3a922f6: Gained carrier Sep 11 18:10:04.808494 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:04.815876 dockerd[2991]: time="2026-09-11T18:10:04.815852249Z" level=info msg="sbJoin: gwep4 ''->'989a476576ac', gwep6 ''->''" eid=989a476576ac ep=zen_visvesvaraya net=bridge nid=ad3b593e9776 Sep 11 18:10:05.685045 sshd[11537]: Connection closed by authenticating user root 118.194.249.186 port 50224 [preauth] Sep 11 18:10:05.684000 audit[11537]: AUDIT1109 pid=11537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:05.686877 systemd[1]: sshd@85-4141-10.0.0.33:22-118.194.249.186:50224.service: Deactivated successfully. Sep 11 18:10:05.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-4141-10.0.0.33:22-118.194.249.186:50224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:05.838541 systemd[1]: docker-aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4.scope: Deactivated successfully. Sep 11 18:10:05.851635 dockerd[2991]: time="2026-09-11T18:10:05.851599046Z" level=info msg="ignoring event" container=aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:05.851932 containerd[2527]: time="2026-09-11T18:10:05.851811099Z" level=info msg="shim disconnected" id=aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4 namespace=moby Sep 11 18:10:05.851932 containerd[2527]: time="2026-09-11T18:10:05.851840755Z" level=info msg="cleaning up after shim disconnected" id=aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4 namespace=moby Sep 11 18:10:05.851932 containerd[2527]: time="2026-09-11T18:10:05.851847790Z" level=info msg="cleaning up dead shim" id=aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4 namespace=moby Sep 11 18:10:05.886073 kernel: docker0: port 1(veth3a922f6) entered disabled state Sep 11 18:10:05.886239 kernel: vethd1af691: renamed from eth0 Sep 11 18:10:05.886546 systemd-networkd[2304]: veth3a922f6: Lost carrier Sep 11 18:10:05.900000 audit[11607]: NETFILTER_CFG table=raw:227 family=2 entries=1 op=nft_unregister_rule pid=11607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:05.900000 audit[11607]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe51a1d400 a2=0 a3=0 items=0 ppid=2991 pid=11607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:05.900000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:05.911807 systemd-networkd[2304]: veth3a922f6: Link DOWN Sep 11 18:10:05.913021 kernel: docker0: port 1(veth3a922f6) entered disabled state Sep 11 18:10:05.916158 kernel: veth3a922f6 (unregistering): left allmulticast mode Sep 11 18:10:05.916218 kernel: veth3a922f6 (unregistering): left promiscuous mode Sep 11 18:10:05.910000 audit: ANOM_PROMISCUOUS dev=veth3a922f6 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:05.917559 kernel: docker0: port 1(veth3a922f6) entered disabled state Sep 11 18:10:05.910000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca810ac6ec0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:05.910000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:05.926470 systemd[1]: Started sshd@86-42-10.0.0.33:22-118.194.249.186:38702.service - OpenSSH per-connection server daemon (118.194.249.186:38702). Sep 11 18:10:05.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-42-10.0.0.33:22-118.194.249.186:38702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:05.928336 systemd[1]: run-docker-netns-d51c5a92819e.mount: Deactivated successfully. Sep 11 18:10:05.934052 systemd[1]: var-lib-docker-rootfs-overlayfs-aad9973726d718f52decb987870b88a5b1a6c8a6711acd1dc029ae9a3ee884e4.mount: Deactivated successfully. Sep 11 18:10:05.941000 audit: BPF prog-id=526 op=UNLOAD Sep 11 18:10:05.941000 audit: BPF prog-id=530 op=UNLOAD Sep 11 18:10:06.087895 systemd[1]: tmp-containerd\x2dmount3381507225.mount: Deactivated successfully. Sep 11 18:10:06.164504 containerd[2527]: time="2026-09-11T18:10:06.164400894Z" level=info msg="connecting to shim 452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc" address="unix:///run/containerd/s/4a3ad63c6334605c69448f70aee7abafddb8cdd2ed92b451e09412049f5c7f85" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:06.184185 systemd[1]: Started docker-452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc.scope - libcontainer container 452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc. Sep 11 18:10:06.193000 audit: BPF prog-id=531 op=LOAD Sep 11 18:10:06.193000 audit: BPF prog-id=532 op=LOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3e8a48629fd8 a2=98 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.193000 audit: BPF prog-id=532 op=UNLOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.193000 audit: BPF prog-id=533 op=LOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3e8a4862a290 a2=98 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.193000 audit: BPF prog-id=534 op=LOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3e8a48629fe8 a2=98 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.193000 audit: BPF prog-id=534 op=UNLOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.193000 audit: BPF prog-id=533 op=UNLOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.193000 audit: BPF prog-id=535 op=LOAD Sep 11 18:10:06.193000 audit[11639]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3e8a4862a4f0 a2=98 a3=0 items=0 ppid=11628 pid=11639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.193000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34353237393263623135623066303037663731343535663633 Sep 11 18:10:06.217858 kernel: docker0: port 1(veth6c98a47) entered blocking state Sep 11 18:10:06.217733 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:06.218024 kernel: docker0: port 1(veth6c98a47) entered disabled state Sep 11 18:10:06.218046 kernel: veth6c98a47: entered allmulticast mode Sep 11 18:10:06.214000 audit: ANOM_PROMISCUOUS dev=veth6c98a47 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:06.214000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca810d4d680 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.214000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:06.221042 kernel: veth6c98a47: entered promiscuous mode Sep 11 18:10:06.221000 audit[11666]: NETFILTER_CFG table=raw:228 family=2 entries=1 op=nft_register_rule pid=11666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:06.221000 audit[11666]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc0ce00820 a2=0 a3=0 items=0 ppid=2991 pid=11666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:06.221000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:06.222480 systemd-networkd[2304]: veth6c98a47: Link UP Sep 11 18:10:06.232286 kernel: eth0: renamed from veth55aed65 Sep 11 18:10:06.232340 kernel: docker0: port 1(veth6c98a47) entered blocking state Sep 11 18:10:06.232247 systemd-networkd[2304]: veth6c98a47: Gained carrier Sep 11 18:10:06.232589 kernel: docker0: port 1(veth6c98a47) entered forwarding state Sep 11 18:10:06.232827 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:06.240421 dockerd[2991]: time="2026-09-11T18:10:06.240389636Z" level=info msg="sbJoin: gwep4 ''->'0d5c89c694a6', gwep6 ''->''" eid=0d5c89c694a6 ep=quirky_meitner net=bridge nid=ad3b593e9776 Sep 11 18:10:06.887914 sshd[11609]: Connection closed by authenticating user root 118.194.249.186 port 38702 [preauth] Sep 11 18:10:06.887000 audit[11609]: AUDIT1109 pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:06.889657 systemd[1]: sshd@86-42-10.0.0.33:22-118.194.249.186:38702.service: Deactivated successfully. Sep 11 18:10:06.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-42-10.0.0.33:22-118.194.249.186:38702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:07.120594 systemd[1]: Started sshd@87-43-10.0.0.33:22-118.194.249.186:49888.service - OpenSSH per-connection server daemon (118.194.249.186:49888). Sep 11 18:10:07.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-43-10.0.0.33:22-118.194.249.186:49888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:07.274179 systemd[1]: docker-452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc.scope: Deactivated successfully. Sep 11 18:10:07.287215 dockerd[2991]: time="2026-09-11T18:10:07.287078980Z" level=info msg="ignoring event" container=452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:07.287651 containerd[2527]: time="2026-09-11T18:10:07.287162427Z" level=info msg="shim disconnected" id=452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc namespace=moby Sep 11 18:10:07.287651 containerd[2527]: time="2026-09-11T18:10:07.287598813Z" level=info msg="cleaning up after shim disconnected" id=452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc namespace=moby Sep 11 18:10:07.287651 containerd[2527]: time="2026-09-11T18:10:07.287607851Z" level=info msg="cleaning up dead shim" id=452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc namespace=moby Sep 11 18:10:07.311238 systemd-networkd[2304]: veth6c98a47: Lost carrier Sep 11 18:10:07.312041 kernel: docker0: port 1(veth6c98a47) entered disabled state Sep 11 18:10:07.312088 kernel: veth55aed65: renamed from eth0 Sep 11 18:10:07.333000 audit[11702]: NETFILTER_CFG table=raw:229 family=2 entries=1 op=nft_unregister_rule pid=11702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:07.333000 audit[11702]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd5e7ff7b0 a2=0 a3=0 items=0 ppid=2991 pid=11702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.333000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:07.341451 systemd-networkd[2304]: veth6c98a47: Link DOWN Sep 11 18:10:07.343156 kernel: docker0: port 1(veth6c98a47) entered disabled state Sep 11 18:10:07.346860 kernel: veth6c98a47 (unregistering): left allmulticast mode Sep 11 18:10:07.346917 kernel: veth6c98a47 (unregistering): left promiscuous mode Sep 11 18:10:07.346940 kernel: docker0: port 1(veth6c98a47) entered disabled state Sep 11 18:10:07.340000 audit: ANOM_PROMISCUOUS dev=veth6c98a47 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:07.340000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4f380 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.340000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:07.357486 systemd[1]: run-docker-netns-0751512e82c4.mount: Deactivated successfully. Sep 11 18:10:07.360271 systemd[1]: var-lib-docker-rootfs-overlayfs-452792cb15b0f007f71455f637800869b90eb2953d7eddcf8f8ef5f849515ebc.mount: Deactivated successfully. Sep 11 18:10:07.368000 audit: BPF prog-id=531 op=UNLOAD Sep 11 18:10:07.368000 audit: BPF prog-id=535 op=UNLOAD Sep 11 18:10:07.486529 systemd[1]: tmp-containerd\x2dmount1447180815.mount: Deactivated successfully. Sep 11 18:10:07.558032 containerd[2527]: time="2026-09-11T18:10:07.557782172Z" level=info msg="connecting to shim dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462" address="unix:///run/containerd/s/d5c659b6d81a9bd0c4fd8b7810e9a2d9696c3884230eb56a426af26cefcbc9e4" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:07.578184 systemd[1]: Started docker-dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462.scope - libcontainer container dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462. Sep 11 18:10:07.585000 audit: BPF prog-id=536 op=LOAD Sep 11 18:10:07.586000 audit: BPF prog-id=537 op=LOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=220343b31fd8 a2=98 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.586000 audit: BPF prog-id=537 op=UNLOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.586000 audit: BPF prog-id=538 op=LOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=220343b32290 a2=98 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.586000 audit: BPF prog-id=539 op=LOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=220343b31fe8 a2=98 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.586000 audit: BPF prog-id=539 op=UNLOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.586000 audit: BPF prog-id=538 op=UNLOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.586000 audit: BPF prog-id=540 op=LOAD Sep 11 18:10:07.586000 audit[11729]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=220343b324f0 a2=98 a3=0 items=0 ppid=11718 pid=11729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64643934633061613765643963643965396465303938363632 Sep 11 18:10:07.611282 kernel: docker0: port 1(veth5b035c1) entered blocking state Sep 11 18:10:07.611149 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:07.611446 kernel: docker0: port 1(veth5b035c1) entered disabled state Sep 11 18:10:07.614197 kernel: veth5b035c1: entered allmulticast mode Sep 11 18:10:07.606000 audit: ANOM_PROMISCUOUS dev=veth5b035c1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:07.616027 kernel: veth5b035c1: entered promiscuous mode Sep 11 18:10:07.606000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811311b00 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.606000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:07.617000 audit[11750]: NETFILTER_CFG table=raw:230 family=2 entries=1 op=nft_register_rule pid=11750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:07.617000 audit[11750]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffa1d94f20 a2=0 a3=0 items=0 ppid=2991 pid=11750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:07.617000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:07.619047 systemd-networkd[2304]: veth5b035c1: Link UP Sep 11 18:10:07.627027 kernel: eth0: renamed from vethbb53afe Sep 11 18:10:07.628951 systemd-networkd[2304]: veth5b035c1: Gained carrier Sep 11 18:10:07.629297 kernel: docker0: port 1(veth5b035c1) entered blocking state Sep 11 18:10:07.629319 kernel: docker0: port 1(veth5b035c1) entered forwarding state Sep 11 18:10:07.629448 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:07.640311 dockerd[2991]: time="2026-09-11T18:10:07.640289068Z" level=info msg="sbJoin: gwep4 ''->'df34094c948e', gwep6 ''->''" eid=df34094c948e ep=fervent_mendeleev net=bridge nid=ad3b593e9776 Sep 11 18:10:08.047979 sshd[11677]: Connection closed by authenticating user root 118.194.249.186 port 49888 [preauth] Sep 11 18:10:08.047000 audit[11677]: AUDIT1109 pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:08.049617 kernel: kauditd_printk_skb: 146 callbacks suppressed Sep 11 18:10:08.049664 kernel: audit: type=1109 audit(1789150208.047:1944): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:08.052000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-43-10.0.0.33:22-118.194.249.186:49888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:08.053264 systemd[1]: sshd@87-43-10.0.0.33:22-118.194.249.186:49888.service: Deactivated successfully. Sep 11 18:10:08.057592 kernel: audit: type=1131 audit(1789150208.052:1945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-43-10.0.0.33:22-118.194.249.186:49888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:08.304568 systemd[1]: Started sshd@88-44-10.0.0.33:22-118.194.249.186:57300.service - OpenSSH per-connection server daemon (118.194.249.186:57300). Sep 11 18:10:08.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-44-10.0.0.33:22-118.194.249.186:57300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:08.310546 kernel: audit: type=1130 audit(1789150208.304:1946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-44-10.0.0.33:22-118.194.249.186:57300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:08.664409 systemd[1]: docker-dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462.scope: Deactivated successfully. Sep 11 18:10:08.677351 dockerd[2991]: time="2026-09-11T18:10:08.677301482Z" level=info msg="ignoring event" container=dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:08.677658 containerd[2527]: time="2026-09-11T18:10:08.677598587Z" level=info msg="shim disconnected" id=dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462 namespace=moby Sep 11 18:10:08.677658 containerd[2527]: time="2026-09-11T18:10:08.677635864Z" level=info msg="cleaning up after shim disconnected" id=dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462 namespace=moby Sep 11 18:10:08.677658 containerd[2527]: time="2026-09-11T18:10:08.677642977Z" level=info msg="cleaning up dead shim" id=dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462 namespace=moby Sep 11 18:10:08.704030 kernel: docker0: port 1(veth5b035c1) entered disabled state Sep 11 18:10:08.704030 systemd-networkd[2304]: veth5b035c1: Lost carrier Sep 11 18:10:08.706024 kernel: vethbb53afe: renamed from eth0 Sep 11 18:10:08.717000 audit[11787]: NETFILTER_CFG table=raw:231 family=2 entries=1 op=nft_unregister_rule pid=11787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:08.717000 audit[11787]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffeb47041a0 a2=0 a3=0 items=0 ppid=2991 pid=11787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:08.725343 kernel: audit: type=1325 audit(1789150208.717:1947): table=raw:231 family=2 entries=1 op=nft_unregister_rule pid=11787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:08.725391 kernel: audit: type=1300 audit(1789150208.717:1947): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffeb47041a0 a2=0 a3=0 items=0 ppid=2991 pid=11787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:08.717000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:08.728992 kernel: audit: type=1327 audit(1789150208.717:1947): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:08.731454 systemd-networkd[2304]: veth5b035c1: Link DOWN Sep 11 18:10:08.733021 kernel: docker0: port 1(veth5b035c1) entered disabled state Sep 11 18:10:08.735743 kernel: veth5b035c1 (unregistering): left allmulticast mode Sep 11 18:10:08.735797 kernel: veth5b035c1 (unregistering): left promiscuous mode Sep 11 18:10:08.730000 audit: ANOM_PROMISCUOUS dev=veth5b035c1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:08.737598 kernel: docker0: port 1(veth5b035c1) entered disabled state Sep 11 18:10:08.737681 kernel: audit: type=1700 audit(1789150208.730:1948): dev=veth5b035c1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:08.730000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbb160 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:08.730000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:08.753512 systemd[1]: run-docker-netns-fbc1eca64342.mount: Deactivated successfully. Sep 11 18:10:08.759941 kernel: audit: type=1300 audit(1789150208.730:1948): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbb160 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:08.758960 systemd[1]: var-lib-docker-rootfs-overlayfs-dd94c0aa7ed9cd9e9de098662b9cf6fe22c84ac3a148f9408ace20968ae99462.mount: Deactivated successfully. Sep 11 18:10:08.760067 kernel: audit: type=1327 audit(1789150208.730:1948): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:08.772000 audit: BPF prog-id=536 op=UNLOAD Sep 11 18:10:08.772000 audit: BPF prog-id=540 op=UNLOAD Sep 11 18:10:08.775021 kernel: audit: type=1334 audit(1789150208.772:1949): prog-id=536 op=UNLOAD Sep 11 18:10:08.921651 systemd[1]: tmp-containerd\x2dmount1415238111.mount: Deactivated successfully. Sep 11 18:10:08.985444 containerd[2527]: time="2026-09-11T18:10:08.985400717Z" level=info msg="connecting to shim 869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f" address="unix:///run/containerd/s/46446ba378d65425fb1f2f926ac0ed40b7ee74d769243a96d51725986f405101" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:09.010180 systemd[1]: Started docker-869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f.scope - libcontainer container 869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f. Sep 11 18:10:09.017000 audit: BPF prog-id=541 op=LOAD Sep 11 18:10:09.017000 audit: BPF prog-id=542 op=LOAD Sep 11 18:10:09.017000 audit[11814]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2e414ef35fd8 a2=98 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.017000 audit: BPF prog-id=542 op=UNLOAD Sep 11 18:10:09.017000 audit[11814]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.017000 audit: BPF prog-id=543 op=LOAD Sep 11 18:10:09.017000 audit[11814]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2e414ef36290 a2=98 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.017000 audit: BPF prog-id=544 op=LOAD Sep 11 18:10:09.017000 audit[11814]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2e414ef35fe8 a2=98 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.017000 audit: BPF prog-id=544 op=UNLOAD Sep 11 18:10:09.017000 audit[11814]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.017000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.018000 audit: BPF prog-id=543 op=UNLOAD Sep 11 18:10:09.018000 audit[11814]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.018000 audit: BPF prog-id=545 op=LOAD Sep 11 18:10:09.018000 audit[11814]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2e414ef364f0 a2=98 a3=0 items=0 ppid=11804 pid=11814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363961333466373334633239343531663461613239636330 Sep 11 18:10:09.042239 kernel: docker0: port 1(vethae46fa3) entered blocking state Sep 11 18:10:09.042116 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:09.042390 kernel: docker0: port 1(vethae46fa3) entered disabled state Sep 11 18:10:09.043461 kernel: vethae46fa3: entered allmulticast mode Sep 11 18:10:09.038000 audit: ANOM_PROMISCUOUS dev=vethae46fa3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:09.044542 kernel: vethae46fa3: entered promiscuous mode Sep 11 18:10:09.038000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f886c0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.038000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:09.045000 audit[11838]: NETFILTER_CFG table=raw:232 family=2 entries=1 op=nft_register_rule pid=11838 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:09.045000 audit[11838]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe259d0cc0 a2=0 a3=0 items=0 ppid=2991 pid=11838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:09.045000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:09.048082 systemd-networkd[2304]: vethae46fa3: Link UP Sep 11 18:10:09.056845 kernel: eth0: renamed from veth821116b Sep 11 18:10:09.056908 kernel: docker0: port 1(vethae46fa3) entered blocking state Sep 11 18:10:09.056932 kernel: docker0: port 1(vethae46fa3) entered forwarding state Sep 11 18:10:09.056955 systemd-networkd[2304]: vethae46fa3: Gained carrier Sep 11 18:10:09.057487 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:09.065346 dockerd[2991]: time="2026-09-11T18:10:09.065317882Z" level=info msg="sbJoin: gwep4 ''->'47e965a47d36', gwep6 ''->''" eid=47e965a47d36 ep=affectionate_davinci net=bridge nid=ad3b593e9776 Sep 11 18:10:09.253149 sshd[11761]: Connection closed by authenticating user root 118.194.249.186 port 57300 [preauth] Sep 11 18:10:09.252000 audit[11761]: AUDIT1109 pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:09.255189 systemd[1]: sshd@88-44-10.0.0.33:22-118.194.249.186:57300.service: Deactivated successfully. Sep 11 18:10:09.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-44-10.0.0.33:22-118.194.249.186:57300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:09.500572 systemd[1]: Started sshd@89-45-10.0.0.33:22-118.194.249.186:48530.service - OpenSSH per-connection server daemon (118.194.249.186:48530). Sep 11 18:10:09.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-45-10.0.0.33:22-118.194.249.186:48530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:10.088297 systemd[1]: docker-869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f.scope: Deactivated successfully. Sep 11 18:10:10.100871 containerd[2527]: time="2026-09-11T18:10:10.100731865Z" level=info msg="shim disconnected" id=869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f namespace=moby Sep 11 18:10:10.100871 containerd[2527]: time="2026-09-11T18:10:10.100804528Z" level=info msg="cleaning up after shim disconnected" id=869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f namespace=moby Sep 11 18:10:10.100871 containerd[2527]: time="2026-09-11T18:10:10.100815936Z" level=info msg="cleaning up dead shim" id=869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f namespace=moby Sep 11 18:10:10.128688 kernel: docker0: port 1(vethae46fa3) entered disabled state Sep 11 18:10:10.128163 systemd-networkd[2304]: vethae46fa3: Lost carrier Sep 11 18:10:10.128972 kernel: veth821116b: renamed from eth0 Sep 11 18:10:10.142000 audit[11876]: NETFILTER_CFG table=raw:233 family=2 entries=1 op=nft_unregister_rule pid=11876 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:10.142000 audit[11876]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdd2479b60 a2=0 a3=0 items=0 ppid=2991 pid=11876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.142000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:10.148478 systemd-networkd[2304]: vethae46fa3: Link DOWN Sep 11 18:10:10.153601 kernel: docker0: port 1(vethae46fa3) entered disabled state Sep 11 18:10:10.153665 kernel: vethae46fa3 (unregistering): left allmulticast mode Sep 11 18:10:10.153692 kernel: vethae46fa3 (unregistering): left promiscuous mode Sep 11 18:10:10.147000 audit: ANOM_PROMISCUOUS dev=vethae46fa3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:10.155190 kernel: docker0: port 1(vethae46fa3) entered disabled state Sep 11 18:10:10.147000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76020 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:10.170465 systemd[1]: run-docker-netns-f8d5164a9135.mount: Deactivated successfully. Sep 11 18:10:10.174558 systemd[1]: var-lib-docker-rootfs-overlayfs-869a34f734c29451f4aa29cc013699259f00c8d705eb1ecf20965cd5f3e33a3f.mount: Deactivated successfully. Sep 11 18:10:10.182000 audit: BPF prog-id=541 op=UNLOAD Sep 11 18:10:10.182000 audit: BPF prog-id=545 op=UNLOAD Sep 11 18:10:10.315489 systemd[1]: tmp-containerd\x2dmount1692406989.mount: Deactivated successfully. Sep 11 18:10:10.383383 containerd[2527]: time="2026-09-11T18:10:10.383346930Z" level=info msg="connecting to shim 9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381" address="unix:///run/containerd/s/0d624d7274df56bc38ea48d7e2bf8000fbbb6e0ec8dd5f215897b0c5b2f7fbe7" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:10.405206 systemd[1]: Started docker-9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381.scope - libcontainer container 9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381. Sep 11 18:10:10.413000 audit: BPF prog-id=546 op=LOAD Sep 11 18:10:10.413000 audit: BPF prog-id=547 op=LOAD Sep 11 18:10:10.413000 audit[11905]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b5785231fd8 a2=98 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.414000 audit: BPF prog-id=547 op=UNLOAD Sep 11 18:10:10.414000 audit[11905]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.414000 audit: BPF prog-id=548 op=LOAD Sep 11 18:10:10.414000 audit[11905]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b5785232290 a2=98 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.414000 audit: BPF prog-id=549 op=LOAD Sep 11 18:10:10.414000 audit[11905]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3b5785231fe8 a2=98 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.414000 audit: BPF prog-id=549 op=UNLOAD Sep 11 18:10:10.414000 audit[11905]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.414000 audit: BPF prog-id=548 op=UNLOAD Sep 11 18:10:10.414000 audit[11905]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.414000 audit: BPF prog-id=550 op=LOAD Sep 11 18:10:10.414000 audit[11905]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b57852324f0 a2=98 a3=0 items=0 ppid=11894 pid=11905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39666133633335376461653633326231646335623438343962 Sep 11 18:10:10.442017 kernel: docker0: port 1(veth8dab782) entered blocking state Sep 11 18:10:10.442090 kernel: docker0: port 1(veth8dab782) entered disabled state Sep 11 18:10:10.442614 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:10.443498 kernel: veth8dab782: entered allmulticast mode Sep 11 18:10:10.443999 sshd[11849]: Connection closed by authenticating user root 118.194.249.186 port 48530 [preauth] Sep 11 18:10:10.444312 kernel: veth8dab782: entered promiscuous mode Sep 11 18:10:10.437000 audit: ANOM_PROMISCUOUS dev=veth8dab782 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:10.437000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811d02960 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.437000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:10.445000 audit[11849]: AUDIT1109 pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:10.448000 audit[11928]: NETFILTER_CFG table=raw:234 family=2 entries=1 op=nft_register_rule pid=11928 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:10.448000 audit[11928]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffde822470 a2=0 a3=0 items=0 ppid=2991 pid=11928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:10.448000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:10.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-45-10.0.0.33:22-118.194.249.186:48530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:10.449677 systemd[1]: sshd@89-45-10.0.0.33:22-118.194.249.186:48530.service: Deactivated successfully. Sep 11 18:10:10.451927 systemd-networkd[2304]: veth8dab782: Link UP Sep 11 18:10:10.459662 kernel: eth0: renamed from veth3d0c85f Sep 11 18:10:10.459727 kernel: docker0: port 1(veth8dab782) entered blocking state Sep 11 18:10:10.459746 kernel: docker0: port 1(veth8dab782) entered forwarding state Sep 11 18:10:10.459828 systemd-networkd[2304]: veth8dab782: Gained carrier Sep 11 18:10:10.459991 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:10.470272 dockerd[2991]: time="2026-09-11T18:10:10.470243594Z" level=info msg="sbJoin: gwep4 ''->'cd3ac2f5917d', gwep6 ''->''" eid=cd3ac2f5917d ep=busy_raman net=bridge nid=ad3b593e9776 Sep 11 18:10:10.693264 systemd[1]: Started sshd@90-46-10.0.0.33:22-118.194.249.186:42040.service - OpenSSH per-connection server daemon (118.194.249.186:42040). Sep 11 18:10:10.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-46-10.0.0.33:22-118.194.249.186:42040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:11.497295 systemd[1]: docker-9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381.scope: Deactivated successfully. Sep 11 18:10:11.510146 containerd[2527]: time="2026-09-11T18:10:11.510113953Z" level=info msg="shim disconnected" id=9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381 namespace=moby Sep 11 18:10:11.510474 dockerd[2991]: time="2026-09-11T18:10:11.510245656Z" level=info msg="ignoring event" container=9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:11.511221 containerd[2527]: time="2026-09-11T18:10:11.511078086Z" level=info msg="cleaning up after shim disconnected" id=9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381 namespace=moby Sep 11 18:10:11.511221 containerd[2527]: time="2026-09-11T18:10:11.511098330Z" level=info msg="cleaning up dead shim" id=9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381 namespace=moby Sep 11 18:10:11.534284 systemd-networkd[2304]: veth8dab782: Lost carrier Sep 11 18:10:11.535278 kernel: docker0: port 1(veth8dab782) entered disabled state Sep 11 18:10:11.535306 kernel: veth3d0c85f: renamed from eth0 Sep 11 18:10:11.548000 audit[11963]: NETFILTER_CFG table=raw:235 family=2 entries=1 op=nft_unregister_rule pid=11963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:11.548000 audit[11963]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd2a4dca60 a2=0 a3=0 items=0 ppid=2991 pid=11963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.548000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:11.555782 systemd-networkd[2304]: veth8dab782: Link DOWN Sep 11 18:10:11.557023 kernel: docker0: port 1(veth8dab782) entered disabled state Sep 11 18:10:11.557952 kernel: veth8dab782 (unregistering): left allmulticast mode Sep 11 18:10:11.559146 kernel: veth8dab782 (unregistering): left promiscuous mode Sep 11 18:10:11.554000 audit: ANOM_PROMISCUOUS dev=veth8dab782 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:11.559618 kernel: docker0: port 1(veth8dab782) entered disabled state Sep 11 18:10:11.554000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f77b00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.554000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:11.568240 systemd[1]: run-docker-netns-ab9574ba2149.mount: Deactivated successfully. Sep 11 18:10:11.571047 systemd[1]: var-lib-docker-rootfs-overlayfs-9fa3c357dae632b1dc5b4849bcbbd99f68d3f5e00a7c2946e0df31813c492381.mount: Deactivated successfully. Sep 11 18:10:11.583000 audit: BPF prog-id=546 op=UNLOAD Sep 11 18:10:11.583000 audit: BPF prog-id=550 op=UNLOAD Sep 11 18:10:11.637178 sshd[11939]: Connection closed by authenticating user root 118.194.249.186 port 42040 [preauth] Sep 11 18:10:11.636000 audit[11939]: AUDIT1109 pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:11.638894 systemd[1]: sshd@90-46-10.0.0.33:22-118.194.249.186:42040.service: Deactivated successfully. Sep 11 18:10:11.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-46-10.0.0.33:22-118.194.249.186:42040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:11.809411 containerd[2527]: time="2026-09-11T18:10:11.809339649Z" level=info msg="connecting to shim 7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e" address="unix:///run/containerd/s/bfb75cd8d7901c5cb8de1c6666c8c40eccd28ad145c1aa670b8162bdd0906b0f" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:11.829183 systemd[1]: Started docker-7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e.scope - libcontainer container 7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e. Sep 11 18:10:11.837000 audit: BPF prog-id=551 op=LOAD Sep 11 18:10:11.837000 audit: BPF prog-id=552 op=LOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=4fb9b069fd8 a2=98 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.837000 audit: BPF prog-id=552 op=UNLOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.837000 audit: BPF prog-id=553 op=LOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=4fb9b06a290 a2=98 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.837000 audit: BPF prog-id=554 op=LOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=4fb9b069fe8 a2=98 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.837000 audit: BPF prog-id=554 op=UNLOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.837000 audit: BPF prog-id=553 op=UNLOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.837000 audit: BPF prog-id=555 op=LOAD Sep 11 18:10:11.837000 audit[11995]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=4fb9b06a4f0 a2=98 a3=0 items=0 ppid=11983 pid=11995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37653230613762353635633863636665333265323762643131 Sep 11 18:10:11.860472 kernel: docker0: port 1(vethc5c67f1) entered blocking state Sep 11 18:10:11.860552 kernel: docker0: port 1(vethc5c67f1) entered disabled state Sep 11 18:10:11.860570 kernel: vethc5c67f1: entered allmulticast mode Sep 11 18:10:11.862100 kernel: vethc5c67f1: entered promiscuous mode Sep 11 18:10:11.857000 audit: ANOM_PROMISCUOUS dev=vethc5c67f1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:11.857000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f10d20 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.857000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:11.862512 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:11.863000 audit[12018]: NETFILTER_CFG table=raw:236 family=2 entries=1 op=nft_register_rule pid=12018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:11.863000 audit[12018]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff4bdb6720 a2=0 a3=0 items=0 ppid=2991 pid=12018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:11.863000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:11.867829 systemd-networkd[2304]: vethc5c67f1: Link UP Sep 11 18:10:11.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-4142-10.0.0.33:22-118.194.249.186:34894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:11.872713 systemd[1]: Started sshd@91-4142-10.0.0.33:22-118.194.249.186:34894.service - OpenSSH per-connection server daemon (118.194.249.186:34894). Sep 11 18:10:11.880237 kernel: eth0: renamed from veth3330b4c Sep 11 18:10:11.880340 kernel: docker0: port 1(vethc5c67f1) entered blocking state Sep 11 18:10:11.881214 kernel: docker0: port 1(vethc5c67f1) entered forwarding state Sep 11 18:10:11.881435 systemd-networkd[2304]: vethc5c67f1: Gained carrier Sep 11 18:10:11.881675 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:11.896396 dockerd[2991]: time="2026-09-11T18:10:11.896372060Z" level=info msg="sbJoin: gwep4 ''->'5de6bed35baf', gwep6 ''->''" eid=5de6bed35baf ep=objective_tharp net=bridge nid=ad3b593e9776 Sep 11 18:10:12.796267 sshd[12019]: Connection closed by authenticating user root 118.194.249.186 port 34894 [preauth] Sep 11 18:10:12.795000 audit[12019]: AUDIT1109 pid=12019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:12.798019 systemd[1]: sshd@91-4142-10.0.0.33:22-118.194.249.186:34894.service: Deactivated successfully. Sep 11 18:10:12.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-4142-10.0.0.33:22-118.194.249.186:34894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:12.921275 systemd[1]: docker-7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e.scope: Deactivated successfully. Sep 11 18:10:12.931202 systemd-networkd[2304]: vethc5c67f1: Gained IPv6LL Sep 11 18:10:12.934485 dockerd[2991]: time="2026-09-11T18:10:12.934449480Z" level=info msg="ignoring event" container=7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:12.935061 containerd[2527]: time="2026-09-11T18:10:12.934777229Z" level=info msg="shim disconnected" id=7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e namespace=moby Sep 11 18:10:12.935061 containerd[2527]: time="2026-09-11T18:10:12.934809484Z" level=info msg="cleaning up after shim disconnected" id=7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e namespace=moby Sep 11 18:10:12.935061 containerd[2527]: time="2026-09-11T18:10:12.934817559Z" level=info msg="cleaning up dead shim" id=7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e namespace=moby Sep 11 18:10:12.967283 kernel: docker0: port 1(vethc5c67f1) entered disabled state Sep 11 18:10:12.967346 kernel: veth3330b4c: renamed from eth0 Sep 11 18:10:12.967444 systemd-networkd[2304]: vethc5c67f1: Lost carrier Sep 11 18:10:12.984000 audit[12053]: NETFILTER_CFG table=raw:237 family=2 entries=1 op=nft_unregister_rule pid=12053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:12.984000 audit[12053]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc2b8d6890 a2=0 a3=0 items=0 ppid=2991 pid=12053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:12.984000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:12.990398 systemd-networkd[2304]: vethc5c67f1: Link DOWN Sep 11 18:10:12.992033 kernel: docker0: port 1(vethc5c67f1) entered disabled state Sep 11 18:10:12.994494 kernel: vethc5c67f1 (unregistering): left allmulticast mode Sep 11 18:10:12.994547 kernel: vethc5c67f1 (unregistering): left promiscuous mode Sep 11 18:10:12.995660 kernel: docker0: port 1(vethc5c67f1) entered disabled state Sep 11 18:10:12.989000 audit: ANOM_PROMISCUOUS dev=vethc5c67f1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:12.989000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca8112e1520 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:12.989000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:13.008933 systemd[1]: run-docker-netns-4156a15b69ec.mount: Deactivated successfully. Sep 11 18:10:13.012124 systemd[1]: var-lib-docker-rootfs-overlayfs-7e20a7b565c8ccfe32e27bd1180774e60b7cdbd7a3850f0e3b8fc135e828b08e.mount: Deactivated successfully. Sep 11 18:10:13.020000 audit: BPF prog-id=551 op=UNLOAD Sep 11 18:10:13.020000 audit: BPF prog-id=555 op=UNLOAD Sep 11 18:10:13.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-47-10.0.0.33:22-118.194.249.186:50580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:13.043273 systemd[1]: Started sshd@92-47-10.0.0.33:22-118.194.249.186:50580.service - OpenSSH per-connection server daemon (118.194.249.186:50580). Sep 11 18:10:13.241414 containerd[2527]: time="2026-09-11T18:10:13.241328349Z" level=info msg="connecting to shim ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4" address="unix:///run/containerd/s/b6a2e34c4e9cfe5ec5ca962a70fa71a9bc2698c98c2bbbe6065b0a1cfdae7bca" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:13.263207 systemd[1]: Started docker-ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4.scope - libcontainer container ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4. Sep 11 18:10:13.271000 audit: BPF prog-id=556 op=LOAD Sep 11 18:10:13.273835 kernel: kauditd_printk_skb: 121 callbacks suppressed Sep 11 18:10:13.273903 kernel: audit: type=1334 audit(1789150213.271:2005): prog-id=556 op=LOAD Sep 11 18:10:13.272000 audit: BPF prog-id=557 op=LOAD Sep 11 18:10:13.276368 kernel: audit: type=1334 audit(1789150213.272:2006): prog-id=557 op=LOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f434937dfd8 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.281958 kernel: audit: type=1300 audit(1789150213.272:2006): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f434937dfd8 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.288022 kernel: audit: type=1327 audit(1789150213.272:2006): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.272000 audit: BPF prog-id=557 op=UNLOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.295353 kernel: audit: type=1334 audit(1789150213.272:2007): prog-id=557 op=UNLOAD Sep 11 18:10:13.295380 kernel: audit: type=1300 audit(1789150213.272:2007): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.308921 kernel: audit: type=1327 audit(1789150213.272:2007): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.272000 audit: BPF prog-id=558 op=LOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f434937e290 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.311394 kernel: audit: type=1334 audit(1789150213.272:2008): prog-id=558 op=LOAD Sep 11 18:10:13.311519 kernel: audit: type=1300 audit(1789150213.272:2008): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f434937e290 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.316831 kernel: audit: type=1327 audit(1789150213.272:2008): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.272000 audit: BPF prog-id=559 op=LOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2f434937dfe8 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.272000 audit: BPF prog-id=559 op=UNLOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.272000 audit: BPF prog-id=558 op=UNLOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.272000 audit: BPF prog-id=560 op=LOAD Sep 11 18:10:13.272000 audit[12085]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f434937e4f0 a2=98 a3=0 items=0 ppid=12074 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66666430643331303331633633393735373730623635633464 Sep 11 18:10:13.320204 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:13.322521 kernel: docker0: port 1(vethe8e66fa) entered blocking state Sep 11 18:10:13.322568 kernel: docker0: port 1(vethe8e66fa) entered disabled state Sep 11 18:10:13.325701 kernel: vethe8e66fa: entered allmulticast mode Sep 11 18:10:13.319000 audit: ANOM_PROMISCUOUS dev=vethe8e66fa prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:13.319000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811c886f0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.319000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:13.328062 kernel: vethe8e66fa: entered promiscuous mode Sep 11 18:10:13.328000 audit[12107]: NETFILTER_CFG table=raw:238 family=2 entries=1 op=nft_register_rule pid=12107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:13.328000 audit[12107]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc30e25b70 a2=0 a3=0 items=0 ppid=2991 pid=12107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:13.328000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:13.329632 systemd-networkd[2304]: vethe8e66fa: Link UP Sep 11 18:10:13.338022 kernel: eth0: renamed from vethcd4d266 Sep 11 18:10:13.340297 kernel: docker0: port 1(vethe8e66fa) entered blocking state Sep 11 18:10:13.340952 kernel: docker0: port 1(vethe8e66fa) entered forwarding state Sep 11 18:10:13.340373 systemd-networkd[2304]: vethe8e66fa: Gained carrier Sep 11 18:10:13.340577 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:13.350871 dockerd[2991]: time="2026-09-11T18:10:13.350837539Z" level=info msg="sbJoin: gwep4 ''->'32916c3f2a33', gwep6 ''->''" eid=32916c3f2a33 ep=focused_hodgkin net=bridge nid=ad3b593e9776 Sep 11 18:10:13.987117 sshd[12055]: Connection closed by authenticating user root 118.194.249.186 port 50580 [preauth] Sep 11 18:10:13.986000 audit[12055]: AUDIT1109 pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:13.988943 systemd[1]: sshd@92-47-10.0.0.33:22-118.194.249.186:50580.service: Deactivated successfully. Sep 11 18:10:13.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-47-10.0.0.33:22-118.194.249.186:50580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:14.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-4143-10.0.0.33:22-118.194.249.186:40238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:14.228315 systemd[1]: Started sshd@93-4143-10.0.0.33:22-118.194.249.186:40238.service - OpenSSH per-connection server daemon (118.194.249.186:40238). Sep 11 18:10:14.373383 systemd[1]: docker-ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4.scope: Deactivated successfully. Sep 11 18:10:14.385702 dockerd[2991]: time="2026-09-11T18:10:14.385664551Z" level=info msg="ignoring event" container=ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:14.386405 containerd[2527]: time="2026-09-11T18:10:14.386114928Z" level=info msg="shim disconnected" id=ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4 namespace=moby Sep 11 18:10:14.386648 containerd[2527]: time="2026-09-11T18:10:14.386404283Z" level=info msg="cleaning up after shim disconnected" id=ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4 namespace=moby Sep 11 18:10:14.386648 containerd[2527]: time="2026-09-11T18:10:14.386413873Z" level=info msg="cleaning up dead shim" id=ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4 namespace=moby Sep 11 18:10:14.409651 systemd-networkd[2304]: vethe8e66fa: Lost carrier Sep 11 18:10:14.410489 kernel: docker0: port 1(vethe8e66fa) entered disabled state Sep 11 18:10:14.410522 kernel: vethcd4d266: renamed from eth0 Sep 11 18:10:14.424000 audit[12143]: NETFILTER_CFG table=raw:239 family=2 entries=1 op=nft_unregister_rule pid=12143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:14.424000 audit[12143]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffdd42f1260 a2=0 a3=0 items=0 ppid=2991 pid=12143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.424000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:14.430481 systemd-networkd[2304]: vethe8e66fa: Link DOWN Sep 11 18:10:14.432175 kernel: docker0: port 1(vethe8e66fa) entered disabled state Sep 11 18:10:14.435470 kernel: vethe8e66fa (unregistering): left allmulticast mode Sep 11 18:10:14.435626 kernel: vethe8e66fa (unregistering): left promiscuous mode Sep 11 18:10:14.435649 kernel: docker0: port 1(vethe8e66fa) entered disabled state Sep 11 18:10:14.429000 audit: ANOM_PROMISCUOUS dev=vethe8e66fa prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:14.429000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811067400 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.429000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:14.448693 systemd[1]: run-docker-netns-003114da39c2.mount: Deactivated successfully. Sep 11 18:10:14.451373 systemd[1]: var-lib-docker-rootfs-overlayfs-ffd0d31031c63975770b65c4d7fa412e7f79f542f4c005b642159ac7a0202bd4.mount: Deactivated successfully. Sep 11 18:10:14.465000 audit: BPF prog-id=556 op=UNLOAD Sep 11 18:10:14.465000 audit: BPF prog-id=560 op=UNLOAD Sep 11 18:10:14.625865 systemd[1]: var-lib-docker-rootfs-overlayfs-bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349.mount: Deactivated successfully. Sep 11 18:10:14.678045 containerd[2527]: time="2026-09-11T18:10:14.677545117Z" level=info msg="connecting to shim bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349" address="unix:///run/containerd/s/11431cd1a0c4d76e5482a83d59123cb095daae0b40c577320784c4a933b2e6a2" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:14.696181 systemd[1]: Started docker-bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349.scope - libcontainer container bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349. Sep 11 18:10:14.704000 audit: BPF prog-id=561 op=LOAD Sep 11 18:10:14.704000 audit: BPF prog-id=562 op=LOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3b15abe0dfd8 a2=98 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.704000 audit: BPF prog-id=562 op=UNLOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.704000 audit: BPF prog-id=563 op=LOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3b15abe0e290 a2=98 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.704000 audit: BPF prog-id=564 op=LOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=3b15abe0dfe8 a2=98 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.704000 audit: BPF prog-id=564 op=UNLOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.704000 audit: BPF prog-id=563 op=UNLOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.704000 audit: BPF prog-id=565 op=LOAD Sep 11 18:10:14.704000 audit[12171]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3b15abe0e4f0 a2=98 a3=0 items=0 ppid=12160 pid=12171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62633735653661623061666163646565316163666561646436 Sep 11 18:10:14.730189 kernel: docker0: port 1(veth536153a) entered blocking state Sep 11 18:10:14.730255 kernel: docker0: port 1(veth536153a) entered disabled state Sep 11 18:10:14.730639 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:14.733505 kernel: veth536153a: entered allmulticast mode Sep 11 18:10:14.725000 audit: ANOM_PROMISCUOUS dev=veth536153a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:14.725000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811776240 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.725000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:14.736056 kernel: veth536153a: entered promiscuous mode Sep 11 18:10:14.736000 audit[12193]: NETFILTER_CFG table=raw:240 family=2 entries=1 op=nft_register_rule pid=12193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:14.736000 audit[12193]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff30ce3670 a2=0 a3=0 items=0 ppid=2991 pid=12193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:14.736000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:14.737875 systemd-networkd[2304]: veth536153a: Link UP Sep 11 18:10:14.747713 kernel: eth0: renamed from vethca63cba Sep 11 18:10:14.747781 kernel: docker0: port 1(veth536153a) entered blocking state Sep 11 18:10:14.747805 kernel: docker0: port 1(veth536153a) entered forwarding state Sep 11 18:10:14.747947 systemd-networkd[2304]: veth536153a: Gained carrier Sep 11 18:10:14.748280 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:14.759130 dockerd[2991]: time="2026-09-11T18:10:14.759099219Z" level=info msg="sbJoin: gwep4 ''->'27b7a1167d16', gwep6 ''->''" eid=27b7a1167d16 ep=focused_wu net=bridge nid=ad3b593e9776 Sep 11 18:10:15.176110 sshd[12118]: Connection closed by authenticating user root 118.194.249.186 port 40238 [preauth] Sep 11 18:10:15.175000 audit[12118]: AUDIT1109 pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:15.177774 systemd[1]: sshd@93-4143-10.0.0.33:22-118.194.249.186:40238.service: Deactivated successfully. Sep 11 18:10:15.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-4143-10.0.0.33:22-118.194.249.186:40238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:15.411796 systemd[1]: Started sshd@94-48-10.0.0.33:22-118.194.249.186:52604.service - OpenSSH per-connection server daemon (118.194.249.186:52604). Sep 11 18:10:15.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-48-10.0.0.33:22-118.194.249.186:52604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:15.784896 systemd[1]: docker-bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349.scope: Deactivated successfully. Sep 11 18:10:15.797846 dockerd[2991]: time="2026-09-11T18:10:15.797748314Z" level=info msg="ignoring event" container=bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:15.798305 containerd[2527]: time="2026-09-11T18:10:15.797859365Z" level=info msg="shim disconnected" id=bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349 namespace=moby Sep 11 18:10:15.798305 containerd[2527]: time="2026-09-11T18:10:15.797891841Z" level=info msg="cleaning up after shim disconnected" id=bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349 namespace=moby Sep 11 18:10:15.798305 containerd[2527]: time="2026-09-11T18:10:15.797899479Z" level=info msg="cleaning up dead shim" id=bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349 namespace=moby Sep 11 18:10:15.823824 systemd-networkd[2304]: veth536153a: Lost carrier Sep 11 18:10:15.824338 kernel: docker0: port 1(veth536153a) entered disabled state Sep 11 18:10:15.826033 kernel: vethca63cba: renamed from eth0 Sep 11 18:10:15.840000 audit[12229]: NETFILTER_CFG table=raw:241 family=2 entries=1 op=nft_unregister_rule pid=12229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:15.840000 audit[12229]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff23ce6a00 a2=0 a3=0 items=0 ppid=2991 pid=12229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:15.840000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:15.844755 systemd-networkd[2304]: veth536153a: Link DOWN Sep 11 18:10:15.846023 kernel: docker0: port 1(veth536153a) entered disabled state Sep 11 18:10:15.848097 kernel: veth536153a (unregistering): left allmulticast mode Sep 11 18:10:15.848151 kernel: veth536153a (unregistering): left promiscuous mode Sep 11 18:10:15.843000 audit: ANOM_PROMISCUOUS dev=veth536153a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:15.849490 kernel: docker0: port 1(veth536153a) entered disabled state Sep 11 18:10:15.843000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4fc60 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:15.843000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:15.858550 systemd[1]: run-docker-netns-d523f9856313.mount: Deactivated successfully. Sep 11 18:10:15.863770 systemd[1]: var-lib-docker-rootfs-overlayfs-bc75e6ab0afacdee1acfeadd6e99935f011b95e40a89787fe940d99f44638349.mount: Deactivated successfully. Sep 11 18:10:15.868000 audit: BPF prog-id=561 op=UNLOAD Sep 11 18:10:15.868000 audit: BPF prog-id=565 op=UNLOAD Sep 11 18:10:15.995807 systemd[1]: tmp-containerd\x2dmount3453577342.mount: Deactivated successfully. Sep 11 18:10:16.078351 containerd[2527]: time="2026-09-11T18:10:16.078202695Z" level=info msg="connecting to shim 312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea" address="unix:///run/containerd/s/4f93e7c5596538480181684299b7bb6c5536731a006ac8c665b0853180f4a1ca" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:16.101206 systemd[1]: Started docker-312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea.scope - libcontainer container 312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea. Sep 11 18:10:16.109000 audit: BPF prog-id=566 op=LOAD Sep 11 18:10:16.110000 audit: BPF prog-id=567 op=LOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c01cf547fd8 a2=98 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.110000 audit: BPF prog-id=567 op=UNLOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.110000 audit: BPF prog-id=568 op=LOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c01cf548290 a2=98 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.110000 audit: BPF prog-id=569 op=LOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1c01cf547fe8 a2=98 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.110000 audit: BPF prog-id=569 op=UNLOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.110000 audit: BPF prog-id=568 op=UNLOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.110000 audit: BPF prog-id=570 op=LOAD Sep 11 18:10:16.110000 audit[12258]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c01cf5484f0 a2=98 a3=0 items=0 ppid=12246 pid=12258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33313265343634663564316265613161643933303639666236 Sep 11 18:10:16.134408 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:16.136449 kernel: docker0: port 1(veth13eadce) entered blocking state Sep 11 18:10:16.136497 kernel: docker0: port 1(veth13eadce) entered disabled state Sep 11 18:10:16.137389 kernel: veth13eadce: entered allmulticast mode Sep 11 18:10:16.133000 audit: ANOM_PROMISCUOUS dev=veth13eadce prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:16.138403 kernel: veth13eadce: entered promiscuous mode Sep 11 18:10:16.133000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e6e10 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:16.139000 audit[12282]: NETFILTER_CFG table=raw:242 family=2 entries=1 op=nft_register_rule pid=12282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:16.139000 audit[12282]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc80929350 a2=0 a3=0 items=0 ppid=2991 pid=12282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:16.139000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:16.141664 systemd-networkd[2304]: veth13eadce: Link UP Sep 11 18:10:16.151580 kernel: eth0: renamed from veth0dc61ed Sep 11 18:10:16.151632 kernel: docker0: port 1(veth13eadce) entered blocking state Sep 11 18:10:16.151653 kernel: docker0: port 1(veth13eadce) entered forwarding state Sep 11 18:10:16.151737 systemd-networkd[2304]: veth13eadce: Gained carrier Sep 11 18:10:16.152139 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:16.158977 dockerd[2991]: time="2026-09-11T18:10:16.158955931Z" level=info msg="sbJoin: gwep4 ''->'28c9109ce7b0', gwep6 ''->''" eid=28c9109ce7b0 ep=loving_dhawan net=bridge nid=ad3b593e9776 Sep 11 18:10:16.341659 sshd[12204]: Connection closed by authenticating user root 118.194.249.186 port 52604 [preauth] Sep 11 18:10:16.341000 audit[12204]: AUDIT1109 pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:16.343740 systemd[1]: sshd@94-48-10.0.0.33:22-118.194.249.186:52604.service: Deactivated successfully. Sep 11 18:10:16.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-48-10.0.0.33:22-118.194.249.186:52604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:16.576795 systemd[1]: Started sshd@95-49-10.0.0.33:22-118.194.249.186:34676.service - OpenSSH per-connection server daemon (118.194.249.186:34676). Sep 11 18:10:16.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-49-10.0.0.33:22-118.194.249.186:34676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:17.182073 systemd[1]: docker-312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea.scope: Deactivated successfully. Sep 11 18:10:17.195404 dockerd[2991]: time="2026-09-11T18:10:17.195242418Z" level=info msg="ignoring event" container=312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:17.196292 containerd[2527]: time="2026-09-11T18:10:17.196126084Z" level=info msg="shim disconnected" id=312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea namespace=moby Sep 11 18:10:17.196292 containerd[2527]: time="2026-09-11T18:10:17.196283054Z" level=info msg="cleaning up after shim disconnected" id=312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea namespace=moby Sep 11 18:10:17.196292 containerd[2527]: time="2026-09-11T18:10:17.196293418Z" level=info msg="cleaning up dead shim" id=312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea namespace=moby Sep 11 18:10:17.219033 kernel: docker0: port 1(veth13eadce) entered disabled state Sep 11 18:10:17.219094 systemd-networkd[2304]: veth13eadce: Lost carrier Sep 11 18:10:17.221022 kernel: veth0dc61ed: renamed from eth0 Sep 11 18:10:17.233000 audit[12321]: NETFILTER_CFG table=raw:243 family=2 entries=1 op=nft_unregister_rule pid=12321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:17.233000 audit[12321]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7fff97347940 a2=0 a3=0 items=0 ppid=2991 pid=12321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.233000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:17.240426 systemd-networkd[2304]: veth13eadce: Link DOWN Sep 11 18:10:17.242186 kernel: docker0: port 1(veth13eadce) entered disabled state Sep 11 18:10:17.244758 kernel: veth13eadce (unregistering): left allmulticast mode Sep 11 18:10:17.244812 kernel: veth13eadce (unregistering): left promiscuous mode Sep 11 18:10:17.239000 audit: ANOM_PROMISCUOUS dev=veth13eadce prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:17.246213 kernel: docker0: port 1(veth13eadce) entered disabled state Sep 11 18:10:17.239000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811fff560 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.239000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:17.255082 systemd[1]: run-docker-netns-3bec32179af8.mount: Deactivated successfully. Sep 11 18:10:17.256896 systemd[1]: var-lib-docker-rootfs-overlayfs-312e464f5d1bea1ad93069fb6b8e4fa5fb24564e57ca44d5d95da1fc865e91ea.mount: Deactivated successfully. Sep 11 18:10:17.268000 audit: BPF prog-id=566 op=UNLOAD Sep 11 18:10:17.268000 audit: BPF prog-id=570 op=UNLOAD Sep 11 18:10:17.378137 systemd[1]: tmp-containerd\x2dmount2901460385.mount: Deactivated successfully. Sep 11 18:10:17.464461 containerd[2527]: time="2026-09-11T18:10:17.464379419Z" level=info msg="connecting to shim f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d" address="unix:///run/containerd/s/01cfff34be43ad06a2ae06cc0515256beeb5cb4bd713a335476f8b137838c5da" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:17.486184 systemd[1]: Started docker-f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d.scope - libcontainer container f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d. Sep 11 18:10:17.494000 audit: BPF prog-id=571 op=LOAD Sep 11 18:10:17.494000 audit: BPF prog-id=572 op=LOAD Sep 11 18:10:17.494000 audit[12350]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e26df231fd8 a2=98 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.494000 audit: BPF prog-id=572 op=UNLOAD Sep 11 18:10:17.494000 audit[12350]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.494000 audit: BPF prog-id=573 op=LOAD Sep 11 18:10:17.494000 audit[12350]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e26df232290 a2=98 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.494000 audit: BPF prog-id=574 op=LOAD Sep 11 18:10:17.494000 audit[12350]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=e26df231fe8 a2=98 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.494000 audit: BPF prog-id=574 op=UNLOAD Sep 11 18:10:17.494000 audit[12350]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.494000 audit: BPF prog-id=573 op=UNLOAD Sep 11 18:10:17.494000 audit[12350]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.495000 audit: BPF prog-id=575 op=LOAD Sep 11 18:10:17.495000 audit[12350]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=e26df2324f0 a2=98 a3=0 items=0 ppid=12339 pid=12350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536643836323865346131343437353162313233396236 Sep 11 18:10:17.504000 audit[12293]: AUDIT1109 pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:17.505655 sshd[12293]: Connection closed by authenticating user root 118.194.249.186 port 34676 [preauth] Sep 11 18:10:17.506814 systemd[1]: sshd@95-49-10.0.0.33:22-118.194.249.186:34676.service: Deactivated successfully. Sep 11 18:10:17.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-49-10.0.0.33:22-118.194.249.186:34676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:17.521094 kernel: docker0: port 1(veth50c102a) entered blocking state Sep 11 18:10:17.521158 kernel: docker0: port 1(veth50c102a) entered disabled state Sep 11 18:10:17.521634 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:17.522513 kernel: veth50c102a: entered allmulticast mode Sep 11 18:10:17.523113 kernel: veth50c102a: entered promiscuous mode Sep 11 18:10:17.518000 audit: ANOM_PROMISCUOUS dev=veth50c102a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:17.518000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8109e58c0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.518000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:17.524000 audit[12374]: NETFILTER_CFG table=raw:244 family=2 entries=1 op=nft_register_rule pid=12374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:17.524000 audit[12374]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe1e72cc30 a2=0 a3=0 items=0 ppid=2991 pid=12374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:17.524000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:17.525762 systemd-networkd[2304]: veth50c102a: Link UP Sep 11 18:10:17.537308 kernel: eth0: renamed from veth3c6502d Sep 11 18:10:17.537245 systemd-networkd[2304]: veth50c102a: Gained carrier Sep 11 18:10:17.537426 kernel: docker0: port 1(veth50c102a) entered blocking state Sep 11 18:10:17.537440 kernel: docker0: port 1(veth50c102a) entered forwarding state Sep 11 18:10:17.538286 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:17.546013 dockerd[2991]: time="2026-09-11T18:10:17.545978536Z" level=info msg="sbJoin: gwep4 ''->'2451a2dd0a15', gwep6 ''->''" eid=2451a2dd0a15 ep=xenodochial_shamir net=bridge nid=ad3b593e9776 Sep 11 18:10:17.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-50-10.0.0.33:22-118.194.249.186:44820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:17.748431 systemd[1]: Started sshd@96-50-10.0.0.33:22-118.194.249.186:44820.service - OpenSSH per-connection server daemon (118.194.249.186:44820). Sep 11 18:10:18.568135 systemd[1]: docker-f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d.scope: Deactivated successfully. Sep 11 18:10:18.581047 dockerd[2991]: time="2026-09-11T18:10:18.580931270Z" level=info msg="ignoring event" container=f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:18.581561 containerd[2527]: time="2026-09-11T18:10:18.581531438Z" level=info msg="shim disconnected" id=f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d namespace=moby Sep 11 18:10:18.582073 containerd[2527]: time="2026-09-11T18:10:18.582051001Z" level=info msg="cleaning up after shim disconnected" id=f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d namespace=moby Sep 11 18:10:18.582073 containerd[2527]: time="2026-09-11T18:10:18.582068703Z" level=info msg="cleaning up dead shim" id=f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d namespace=moby Sep 11 18:10:18.607283 systemd-networkd[2304]: veth50c102a: Lost carrier Sep 11 18:10:18.608369 kernel: docker0: port 1(veth50c102a) entered disabled state Sep 11 18:10:18.608393 kernel: veth3c6502d: renamed from eth0 Sep 11 18:10:18.624000 audit[12409]: NETFILTER_CFG table=raw:245 family=2 entries=1 op=nft_unregister_rule pid=12409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:18.627394 kernel: kauditd_printk_skb: 138 callbacks suppressed Sep 11 18:10:18.627457 kernel: audit: type=1325 audit(1789150218.624:2069): table=raw:245 family=2 entries=1 op=nft_unregister_rule pid=12409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:18.624000 audit[12409]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffed800a200 a2=0 a3=0 items=0 ppid=2991 pid=12409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.630675 kernel: audit: type=1300 audit(1789150218.624:2069): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffed800a200 a2=0 a3=0 items=0 ppid=2991 pid=12409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.624000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:18.633017 kernel: audit: type=1327 audit(1789150218.624:2069): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:18.633902 systemd-networkd[2304]: veth50c102a: Link DOWN Sep 11 18:10:18.635022 kernel: docker0: port 1(veth50c102a) entered disabled state Sep 11 18:10:18.637212 kernel: veth50c102a (unregistering): left allmulticast mode Sep 11 18:10:18.637321 kernel: veth50c102a (unregistering): left promiscuous mode Sep 11 18:10:18.637445 kernel: docker0: port 1(veth50c102a) entered disabled state Sep 11 18:10:18.632000 audit: ANOM_PROMISCUOUS dev=veth50c102a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:18.639633 kernel: audit: type=1700 audit(1789150218.632:2070): dev=veth50c102a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:18.632000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dba540 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.632000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:18.648627 systemd[1]: run-docker-netns-0a49cfc26caf.mount: Deactivated successfully. Sep 11 18:10:18.653444 kernel: audit: type=1300 audit(1789150218.632:2070): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dba540 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.653500 kernel: audit: type=1327 audit(1789150218.632:2070): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:18.654069 systemd[1]: var-lib-docker-rootfs-overlayfs-f356d8628e4a144751b1239b6ed61880ac411a9991584ef3ba4c94d5fd34574d.mount: Deactivated successfully. Sep 11 18:10:18.666000 audit: BPF prog-id=571 op=UNLOAD Sep 11 18:10:18.666000 audit: BPF prog-id=575 op=UNLOAD Sep 11 18:10:18.669180 kernel: audit: type=1334 audit(1789150218.666:2071): prog-id=571 op=UNLOAD Sep 11 18:10:18.669218 kernel: audit: type=1334 audit(1789150218.666:2072): prog-id=575 op=UNLOAD Sep 11 18:10:18.675805 sshd[12384]: Connection closed by authenticating user root 118.194.249.186 port 44820 [preauth] Sep 11 18:10:18.675000 audit[12384]: AUDIT1109 pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:18.677232 systemd[1]: sshd@96-50-10.0.0.33:22-118.194.249.186:44820.service: Deactivated successfully. Sep 11 18:10:18.681024 kernel: audit: type=1109 audit(1789150218.675:2073): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:18.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-50-10.0.0.33:22-118.194.249.186:44820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:18.681178 kernel: audit: type=1131 audit(1789150218.675:2074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-50-10.0.0.33:22-118.194.249.186:44820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:18.795369 systemd[1]: tmp-containerd\x2dmount2815052711.mount: Deactivated successfully. Sep 11 18:10:18.904447 containerd[2527]: time="2026-09-11T18:10:18.904406442Z" level=info msg="connecting to shim 95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f" address="unix:///run/containerd/s/679588087077de3ba4be4760f0f4c96346035472c8a273a20ef4bd091b003f58" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:18.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-51-10.0.0.33:22-118.194.249.186:60886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:18.917435 systemd[1]: Started sshd@97-51-10.0.0.33:22-118.194.249.186:60886.service - OpenSSH per-connection server daemon (118.194.249.186:60886). Sep 11 18:10:18.925284 systemd[1]: Started docker-95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f.scope - libcontainer container 95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f. Sep 11 18:10:18.936000 audit: BPF prog-id=576 op=LOAD Sep 11 18:10:18.936000 audit: BPF prog-id=577 op=LOAD Sep 11 18:10:18.936000 audit[12440]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2b315c10dfd8 a2=98 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.936000 audit: BPF prog-id=577 op=UNLOAD Sep 11 18:10:18.936000 audit[12440]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.937000 audit: BPF prog-id=578 op=LOAD Sep 11 18:10:18.937000 audit[12440]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2b315c10e290 a2=98 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.937000 audit: BPF prog-id=579 op=LOAD Sep 11 18:10:18.937000 audit[12440]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2b315c10dfe8 a2=98 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.937000 audit: BPF prog-id=579 op=UNLOAD Sep 11 18:10:18.937000 audit[12440]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.937000 audit: BPF prog-id=578 op=UNLOAD Sep 11 18:10:18.937000 audit[12440]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.937000 audit: BPF prog-id=580 op=LOAD Sep 11 18:10:18.937000 audit[12440]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2b315c10e4f0 a2=98 a3=0 items=0 ppid=12428 pid=12440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39356336616566623335353661386636623966343764613563 Sep 11 18:10:18.960399 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:18.962077 kernel: docker0: port 1(veth70077f0) entered blocking state Sep 11 18:10:18.962140 kernel: docker0: port 1(veth70077f0) entered disabled state Sep 11 18:10:18.963134 kernel: veth70077f0: entered allmulticast mode Sep 11 18:10:18.964300 kernel: veth70077f0: entered promiscuous mode Sep 11 18:10:18.958000 audit: ANOM_PROMISCUOUS dev=veth70077f0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:18.958000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811d03c20 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.958000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:18.966000 audit[12463]: NETFILTER_CFG table=raw:246 family=2 entries=1 op=nft_register_rule pid=12463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:18.966000 audit[12463]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffdc3797400 a2=0 a3=0 items=0 ppid=2991 pid=12463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:18.966000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:18.967552 systemd-networkd[2304]: veth70077f0: Link UP Sep 11 18:10:18.990466 kernel: eth0: renamed from veth9269a12 Sep 11 18:10:18.990522 kernel: docker0: port 1(veth70077f0) entered blocking state Sep 11 18:10:18.990538 kernel: docker0: port 1(veth70077f0) entered forwarding state Sep 11 18:10:18.990646 systemd-networkd[2304]: veth70077f0: Gained carrier Sep 11 18:10:18.991034 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:19.000119 dockerd[2991]: time="2026-09-11T18:10:19.000091660Z" level=info msg="sbJoin: gwep4 ''->'8401fec8435e', gwep6 ''->''" eid=8401fec8435e ep=practical_dubinsky net=bridge nid=ad3b593e9776 Sep 11 18:10:19.849849 sshd[12451]: Connection closed by authenticating user root 118.194.249.186 port 60886 [preauth] Sep 11 18:10:19.849000 audit[12451]: AUDIT1109 pid=12451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:19.851593 systemd[1]: sshd@97-51-10.0.0.33:22-118.194.249.186:60886.service: Deactivated successfully. Sep 11 18:10:19.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-51-10.0.0.33:22-118.194.249.186:60886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:20.025868 systemd[1]: docker-95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f.scope: Deactivated successfully. Sep 11 18:10:20.039242 dockerd[2991]: time="2026-09-11T18:10:20.039208133Z" level=info msg="ignoring event" container=95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:20.039987 containerd[2527]: time="2026-09-11T18:10:20.039822333Z" level=info msg="shim disconnected" id=95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f namespace=moby Sep 11 18:10:20.039987 containerd[2527]: time="2026-09-11T18:10:20.039856919Z" level=info msg="cleaning up after shim disconnected" id=95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f namespace=moby Sep 11 18:10:20.039987 containerd[2527]: time="2026-09-11T18:10:20.039866338Z" level=info msg="cleaning up dead shim" id=95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f namespace=moby Sep 11 18:10:20.067552 kernel: docker0: port 1(veth70077f0) entered disabled state Sep 11 18:10:20.067049 systemd-networkd[2304]: veth70077f0: Lost carrier Sep 11 18:10:20.067857 kernel: veth9269a12: renamed from eth0 Sep 11 18:10:20.092000 audit[12498]: NETFILTER_CFG table=raw:247 family=2 entries=1 op=nft_unregister_rule pid=12498 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:20.092000 audit[12498]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffeb7a5ef40 a2=0 a3=0 items=0 ppid=2991 pid=12498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.092000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:20.096174 systemd[1]: Started sshd@98-4144-10.0.0.33:22-118.194.249.186:49896.service - OpenSSH per-connection server daemon (118.194.249.186:49896). Sep 11 18:10:20.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-4144-10.0.0.33:22-118.194.249.186:49896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:20.097911 systemd-networkd[2304]: veth70077f0: Link DOWN Sep 11 18:10:20.100118 kernel: docker0: port 1(veth70077f0) entered disabled state Sep 11 18:10:20.102793 kernel: veth70077f0 (unregistering): left allmulticast mode Sep 11 18:10:20.102845 kernel: veth70077f0 (unregistering): left promiscuous mode Sep 11 18:10:20.096000 audit: ANOM_PROMISCUOUS dev=veth70077f0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:20.103534 kernel: docker0: port 1(veth70077f0) entered disabled state Sep 11 18:10:20.096000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbbc80 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.096000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:20.118225 systemd[1]: run-docker-netns-a8fb340d8e99.mount: Deactivated successfully. Sep 11 18:10:20.121888 systemd[1]: var-lib-docker-rootfs-overlayfs-95c6aefb3556a8f6b9f47da5c12edd8684d6568568629ff425e5e8052bce117f.mount: Deactivated successfully. Sep 11 18:10:20.126000 audit: BPF prog-id=576 op=UNLOAD Sep 11 18:10:20.126000 audit: BPF prog-id=580 op=UNLOAD Sep 11 18:10:20.347540 containerd[2527]: time="2026-09-11T18:10:20.347449872Z" level=info msg="connecting to shim 69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4" address="unix:///run/containerd/s/d9b8b3a971d98acf8301fe1ef578d24f8e0e354fcb7bd30d88ad46e3c3c07c40" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:20.369202 systemd[1]: Started docker-69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4.scope - libcontainer container 69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4. Sep 11 18:10:20.376000 audit: BPF prog-id=581 op=LOAD Sep 11 18:10:20.377000 audit: BPF prog-id=582 op=LOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=394813031fd8 a2=98 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.377000 audit: BPF prog-id=582 op=UNLOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.377000 audit: BPF prog-id=583 op=LOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=394813032290 a2=98 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.377000 audit: BPF prog-id=584 op=LOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=394813031fe8 a2=98 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.377000 audit: BPF prog-id=584 op=UNLOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.377000 audit: BPF prog-id=583 op=UNLOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.377000 audit: BPF prog-id=585 op=LOAD Sep 11 18:10:20.377000 audit[12530]: SYSCALL arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3948130324f0 a2=98 a3=0 items=0 ppid=12519 pid=12530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36393630336232386234353933633734386532393135303632 Sep 11 18:10:20.398262 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:20.399169 kernel: docker0: port 1(vethdad1601) entered blocking state Sep 11 18:10:20.399394 kernel: docker0: port 1(vethdad1601) entered disabled state Sep 11 18:10:20.400361 kernel: vethdad1601: entered allmulticast mode Sep 11 18:10:20.401472 kernel: vethdad1601: entered promiscuous mode Sep 11 18:10:20.395000 audit: ANOM_PROMISCUOUS dev=vethdad1601 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:20.395000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b67200 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.395000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:20.403000 audit[12551]: NETFILTER_CFG table=raw:248 family=2 entries=1 op=nft_register_rule pid=12551 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:20.403000 audit[12551]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffcd94bfc70 a2=0 a3=0 items=0 ppid=2991 pid=12551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:20.403000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:20.405209 systemd-networkd[2304]: vethdad1601: Link UP Sep 11 18:10:20.414044 kernel: eth0: renamed from vethecf7fd0 Sep 11 18:10:20.414101 kernel: docker0: port 1(vethdad1601) entered blocking state Sep 11 18:10:20.416271 kernel: docker0: port 1(vethdad1601) entered forwarding state Sep 11 18:10:20.416471 systemd-networkd[2304]: vethdad1601: Gained carrier Sep 11 18:10:20.416727 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:20.424366 dockerd[2991]: time="2026-09-11T18:10:20.424335975Z" level=info msg="sbJoin: gwep4 ''->'93aaf914a566', gwep6 ''->''" eid=93aaf914a566 ep=heuristic_panini net=bridge nid=ad3b593e9776 Sep 11 18:10:21.054139 sshd[12499]: Connection closed by authenticating user root 118.194.249.186 port 49896 [preauth] Sep 11 18:10:21.053000 audit[12499]: AUDIT1109 pid=12499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:21.055879 systemd[1]: sshd@98-4144-10.0.0.33:22-118.194.249.186:49896.service: Deactivated successfully. Sep 11 18:10:21.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-4144-10.0.0.33:22-118.194.249.186:49896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:21.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-52-10.0.0.33:22-118.194.249.186:40332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:21.295616 systemd[1]: Started sshd@99-52-10.0.0.33:22-118.194.249.186:40332.service - OpenSSH per-connection server daemon (118.194.249.186:40332). Sep 11 18:10:21.450588 systemd[1]: docker-69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4.scope: Deactivated successfully. Sep 11 18:10:21.463813 containerd[2527]: time="2026-09-11T18:10:21.463662191Z" level=info msg="shim disconnected" id=69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4 namespace=moby Sep 11 18:10:21.463813 containerd[2527]: time="2026-09-11T18:10:21.463691786Z" level=info msg="cleaning up after shim disconnected" id=69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4 namespace=moby Sep 11 18:10:21.463813 containerd[2527]: time="2026-09-11T18:10:21.463699598Z" level=info msg="cleaning up dead shim" id=69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4 namespace=moby Sep 11 18:10:21.464583 dockerd[2991]: time="2026-09-11T18:10:21.464493357Z" level=info msg="ignoring event" container=69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:21.488847 kernel: docker0: port 1(vethdad1601) entered disabled state Sep 11 18:10:21.488971 kernel: vethecf7fd0: renamed from eth0 Sep 11 18:10:21.488888 systemd-networkd[2304]: vethdad1601: Lost carrier Sep 11 18:10:21.504000 audit[12587]: NETFILTER_CFG table=raw:249 family=2 entries=1 op=nft_unregister_rule pid=12587 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:21.504000 audit[12587]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc97a0dd70 a2=0 a3=0 items=0 ppid=2991 pid=12587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.504000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:21.509457 systemd-networkd[2304]: vethdad1601: Link DOWN Sep 11 18:10:21.511338 kernel: docker0: port 1(vethdad1601) entered disabled state Sep 11 18:10:21.513800 kernel: vethdad1601 (unregistering): left allmulticast mode Sep 11 18:10:21.513854 kernel: vethdad1601 (unregistering): left promiscuous mode Sep 11 18:10:21.508000 audit: ANOM_PROMISCUOUS dev=vethdad1601 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:21.515138 kernel: docker0: port 1(vethdad1601) entered disabled state Sep 11 18:10:21.508000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811066b80 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.508000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:21.525419 systemd[1]: run-docker-netns-3229a569aec2.mount: Deactivated successfully. Sep 11 18:10:21.528099 systemd[1]: var-lib-docker-rootfs-overlayfs-69603b28b4593c748e29150622ad49e875f1f29590bebb7598411815024973c4.mount: Deactivated successfully. Sep 11 18:10:21.537000 audit: BPF prog-id=581 op=UNLOAD Sep 11 18:10:21.537000 audit: BPF prog-id=585 op=UNLOAD Sep 11 18:10:21.776591 containerd[2527]: time="2026-09-11T18:10:21.776049179Z" level=info msg="connecting to shim 3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2" address="unix:///run/containerd/s/c79db641ae76738e9ac47da2787d81e2c0d9f0af598d7513102c18f145be6bcb" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:21.799160 systemd[1]: Started docker-3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2.scope - libcontainer container 3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2. Sep 11 18:10:21.806000 audit: BPF prog-id=586 op=LOAD Sep 11 18:10:21.806000 audit: BPF prog-id=587 op=LOAD Sep 11 18:10:21.806000 audit[12615]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3bdd7c5f3fd8 a2=98 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.806000 audit: BPF prog-id=587 op=UNLOAD Sep 11 18:10:21.806000 audit[12615]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.806000 audit: BPF prog-id=588 op=LOAD Sep 11 18:10:21.806000 audit[12615]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3bdd7c5f4290 a2=98 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.806000 audit: BPF prog-id=589 op=LOAD Sep 11 18:10:21.806000 audit[12615]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3bdd7c5f3fe8 a2=98 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.806000 audit: BPF prog-id=589 op=UNLOAD Sep 11 18:10:21.806000 audit[12615]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.806000 audit: BPF prog-id=588 op=UNLOAD Sep 11 18:10:21.806000 audit[12615]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.807000 audit: BPF prog-id=590 op=LOAD Sep 11 18:10:21.807000 audit[12615]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3bdd7c5f44f0 a2=98 a3=0 items=0 ppid=12604 pid=12615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.807000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363432616564653963643264623135613162303234396266 Sep 11 18:10:21.827423 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:21.830196 kernel: docker0: port 1(veth3f328a2) entered blocking state Sep 11 18:10:21.830238 kernel: docker0: port 1(veth3f328a2) entered disabled state Sep 11 18:10:21.826000 audit: ANOM_PROMISCUOUS dev=veth3f328a2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:21.832583 kernel: veth3f328a2: entered allmulticast mode Sep 11 18:10:21.832610 kernel: veth3f328a2: entered promiscuous mode Sep 11 18:10:21.826000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f88900 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.826000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:21.833000 audit[12635]: NETFILTER_CFG table=raw:250 family=2 entries=1 op=nft_register_rule pid=12635 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:21.833000 audit[12635]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fffdb852f10 a2=0 a3=0 items=0 ppid=2991 pid=12635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:21.833000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:21.834965 systemd-networkd[2304]: veth3f328a2: Link UP Sep 11 18:10:21.846582 kernel: eth0: renamed from veth20e397b Sep 11 18:10:21.846640 kernel: docker0: port 1(veth3f328a2) entered blocking state Sep 11 18:10:21.846661 kernel: docker0: port 1(veth3f328a2) entered forwarding state Sep 11 18:10:21.846671 systemd-networkd[2304]: veth3f328a2: Gained carrier Sep 11 18:10:21.847163 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:21.871395 dockerd[2991]: time="2026-09-11T18:10:21.871368629Z" level=info msg="sbJoin: gwep4 ''->'e1d38bf50879', gwep6 ''->''" eid=e1d38bf50879 ep=amazing_wu net=bridge nid=ad3b593e9776 Sep 11 18:10:22.221807 sshd[12562]: Connection closed by authenticating user root 118.194.249.186 port 40332 [preauth] Sep 11 18:10:22.221000 audit[12562]: AUDIT1109 pid=12562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:22.222000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-52-10.0.0.33:22-118.194.249.186:40332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:22.223516 systemd[1]: sshd@99-52-10.0.0.33:22-118.194.249.186:40332.service: Deactivated successfully. Sep 11 18:10:22.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-4145-10.0.0.33:22-118.194.249.186:56028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:22.467383 systemd[1]: Started sshd@100-4145-10.0.0.33:22-118.194.249.186:56028.service - OpenSSH per-connection server daemon (118.194.249.186:56028). Sep 11 18:10:22.898466 systemd[1]: docker-3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2.scope: Deactivated successfully. Sep 11 18:10:22.909511 dockerd[2991]: time="2026-09-11T18:10:22.909472398Z" level=info msg="ignoring event" container=3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:22.909814 containerd[2527]: time="2026-09-11T18:10:22.909697224Z" level=info msg="shim disconnected" id=3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2 namespace=moby Sep 11 18:10:22.909814 containerd[2527]: time="2026-09-11T18:10:22.909725844Z" level=info msg="cleaning up after shim disconnected" id=3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2 namespace=moby Sep 11 18:10:22.909814 containerd[2527]: time="2026-09-11T18:10:22.909733119Z" level=info msg="cleaning up dead shim" id=3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2 namespace=moby Sep 11 18:10:22.934950 systemd-networkd[2304]: veth3f328a2: Lost carrier Sep 11 18:10:22.935439 kernel: docker0: port 1(veth3f328a2) entered disabled state Sep 11 18:10:22.935466 kernel: veth20e397b: renamed from eth0 Sep 11 18:10:22.950000 audit[12671]: NETFILTER_CFG table=raw:251 family=2 entries=1 op=nft_unregister_rule pid=12671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:22.950000 audit[12671]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffce559b7e0 a2=0 a3=0 items=0 ppid=2991 pid=12671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:22.950000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:22.959711 systemd-networkd[2304]: veth3f328a2: Link DOWN Sep 11 18:10:22.961026 kernel: docker0: port 1(veth3f328a2) entered disabled state Sep 11 18:10:22.963576 kernel: veth3f328a2 (unregistering): left allmulticast mode Sep 11 18:10:22.963627 kernel: veth3f328a2 (unregistering): left promiscuous mode Sep 11 18:10:22.958000 audit: ANOM_PROMISCUOUS dev=veth3f328a2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:22.964547 kernel: docker0: port 1(veth3f328a2) entered disabled state Sep 11 18:10:22.958000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8bce0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:22.958000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:22.982803 systemd[1]: run-docker-netns-604d7ecd3859.mount: Deactivated successfully. Sep 11 18:10:22.987887 systemd[1]: var-lib-docker-rootfs-overlayfs-3642aede9cd2db15a1b0249bf35cdac4239d52be3d1e4365e8a42e1cdd5ba0a2.mount: Deactivated successfully. Sep 11 18:10:22.993000 audit: BPF prog-id=586 op=UNLOAD Sep 11 18:10:22.993000 audit: BPF prog-id=590 op=UNLOAD Sep 11 18:10:23.237462 containerd[2527]: time="2026-09-11T18:10:23.237379576Z" level=info msg="connecting to shim e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b" address="unix:///run/containerd/s/2c4643df40cd9f6ad449341e62e24e9521cf77d08cb3a813ebbeba88c420cb8f" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:23.260201 systemd[1]: Started docker-e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b.scope - libcontainer container e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b. Sep 11 18:10:23.268000 audit: BPF prog-id=591 op=LOAD Sep 11 18:10:23.268000 audit: BPF prog-id=592 op=LOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2c7f5a079fd8 a2=98 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.268000 audit: BPF prog-id=592 op=UNLOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.268000 audit: BPF prog-id=593 op=LOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2c7f5a07a290 a2=98 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.268000 audit: BPF prog-id=594 op=LOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2c7f5a079fe8 a2=98 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.268000 audit: BPF prog-id=594 op=UNLOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.268000 audit: BPF prog-id=593 op=UNLOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.268000 audit: BPF prog-id=595 op=LOAD Sep 11 18:10:23.268000 audit[12700]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2c7f5a07a4f0 a2=98 a3=0 items=0 ppid=12688 pid=12700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65306134373036636463313530306364613935653236326463 Sep 11 18:10:23.291109 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:23.291389 kernel: docker0: port 1(veth202a83b) entered blocking state Sep 11 18:10:23.291426 kernel: docker0: port 1(veth202a83b) entered disabled state Sep 11 18:10:23.292421 kernel: veth202a83b: entered allmulticast mode Sep 11 18:10:23.293753 kernel: veth202a83b: entered promiscuous mode Sep 11 18:10:23.287000 audit: ANOM_PROMISCUOUS dev=veth202a83b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:23.287000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca8120e6f60 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.287000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:23.295000 audit[12722]: NETFILTER_CFG table=raw:252 family=2 entries=1 op=nft_register_rule pid=12722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:23.295000 audit[12722]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffc75fd5b00 a2=0 a3=0 items=0 ppid=2991 pid=12722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:23.295000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:23.297205 systemd-networkd[2304]: veth202a83b: Link UP Sep 11 18:10:23.306147 kernel: eth0: renamed from veth0363b1a Sep 11 18:10:23.306200 kernel: docker0: port 1(veth202a83b) entered blocking state Sep 11 18:10:23.306225 kernel: docker0: port 1(veth202a83b) entered forwarding state Sep 11 18:10:23.306268 systemd-networkd[2304]: veth202a83b: Gained carrier Sep 11 18:10:23.306668 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:23.315900 dockerd[2991]: time="2026-09-11T18:10:23.315869411Z" level=info msg="sbJoin: gwep4 ''->'fe02c6a528d9', gwep6 ''->''" eid=fe02c6a528d9 ep=reverent_banach net=bridge nid=ad3b593e9776 Sep 11 18:10:23.415233 sshd[12647]: Connection closed by authenticating user root 118.194.249.186 port 56028 [preauth] Sep 11 18:10:23.414000 audit[12647]: AUDIT1109 pid=12647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:23.416956 systemd[1]: sshd@100-4145-10.0.0.33:22-118.194.249.186:56028.service: Deactivated successfully. Sep 11 18:10:23.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-4145-10.0.0.33:22-118.194.249.186:56028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:23.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-4146-10.0.0.33:22-118.194.249.186:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:23.650140 kernel: kauditd_printk_skb: 148 callbacks suppressed Sep 11 18:10:23.645642 systemd[1]: Started sshd@101-4146-10.0.0.33:22-118.194.249.186:48254.service - OpenSSH per-connection server daemon (118.194.249.186:48254). Sep 11 18:10:23.650258 kernel: audit: type=1130 audit(1789150223.644:2139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-4146-10.0.0.33:22-118.194.249.186:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:24.338294 systemd[1]: docker-e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b.scope: Deactivated successfully. Sep 11 18:10:24.350551 dockerd[2991]: time="2026-09-11T18:10:24.350517278Z" level=info msg="ignoring event" container=e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:24.351000 containerd[2527]: time="2026-09-11T18:10:24.350694010Z" level=info msg="shim disconnected" id=e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b namespace=moby Sep 11 18:10:24.351000 containerd[2527]: time="2026-09-11T18:10:24.351051001Z" level=info msg="cleaning up after shim disconnected" id=e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b namespace=moby Sep 11 18:10:24.351000 containerd[2527]: time="2026-09-11T18:10:24.351065244Z" level=info msg="cleaning up dead shim" id=e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b namespace=moby Sep 11 18:10:24.377020 kernel: veth0363b1a: renamed from eth0 Sep 11 18:10:24.377088 kernel: docker0: port 1(veth202a83b) entered disabled state Sep 11 18:10:24.377584 systemd-networkd[2304]: veth202a83b: Lost carrier Sep 11 18:10:24.390000 audit[12757]: NETFILTER_CFG table=raw:253 family=2 entries=1 op=nft_unregister_rule pid=12757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:24.390000 audit[12757]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcf6c812e0 a2=0 a3=0 items=0 ppid=2991 pid=12757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.396940 kernel: audit: type=1325 audit(1789150224.390:2140): table=raw:253 family=2 entries=1 op=nft_unregister_rule pid=12757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:24.396989 kernel: audit: type=1300 audit(1789150224.390:2140): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffcf6c812e0 a2=0 a3=0 items=0 ppid=2991 pid=12757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.390000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:24.399939 kernel: audit: type=1327 audit(1789150224.390:2140): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:24.402941 systemd-networkd[2304]: veth202a83b: Link DOWN Sep 11 18:10:24.405126 kernel: docker0: port 1(veth202a83b) entered disabled state Sep 11 18:10:24.405345 kernel: veth202a83b (unregistering): left allmulticast mode Sep 11 18:10:24.406343 kernel: veth202a83b (unregistering): left promiscuous mode Sep 11 18:10:24.401000 audit: ANOM_PROMISCUOUS dev=veth202a83b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:24.408128 kernel: docker0: port 1(veth202a83b) entered disabled state Sep 11 18:10:24.408208 kernel: audit: type=1700 audit(1789150224.401:2141): dev=veth202a83b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:24.401000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4eca0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.427610 systemd[1]: run-docker-netns-dd24af0964a8.mount: Deactivated successfully. Sep 11 18:10:24.429022 kernel: audit: type=1300 audit(1789150224.401:2141): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4eca0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.401000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:24.433023 kernel: audit: type=1327 audit(1789150224.401:2141): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:24.435320 systemd[1]: var-lib-docker-rootfs-overlayfs-e0a4706cdc1500cda95e262dc209710e5f78133c9e226b7c5e310e8a7e46f08b.mount: Deactivated successfully. Sep 11 18:10:24.447000 audit: BPF prog-id=591 op=UNLOAD Sep 11 18:10:24.447000 audit: BPF prog-id=595 op=UNLOAD Sep 11 18:10:24.450620 kernel: audit: type=1334 audit(1789150224.447:2142): prog-id=591 op=UNLOAD Sep 11 18:10:24.450644 kernel: audit: type=1334 audit(1789150224.447:2143): prog-id=595 op=UNLOAD Sep 11 18:10:24.581601 sshd[12733]: Connection closed by authenticating user root 118.194.249.186 port 48254 [preauth] Sep 11 18:10:24.580000 audit[12733]: AUDIT1109 pid=12733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:24.582511 systemd[1]: sshd@101-4146-10.0.0.33:22-118.194.249.186:48254.service: Deactivated successfully. Sep 11 18:10:24.588025 kernel: audit: type=1109 audit(1789150224.580:2144): pid=12733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:24.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-4146-10.0.0.33:22-118.194.249.186:48254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:24.666043 containerd[2527]: time="2026-09-11T18:10:24.665441225Z" level=info msg="connecting to shim 53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3" address="unix:///run/containerd/s/bdf07e2728b30674fe19bfd4cd60e5226606c272aec8e49097e3f56f49d21668" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:24.685187 systemd[1]: Started docker-53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3.scope - libcontainer container 53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3. Sep 11 18:10:24.693000 audit: BPF prog-id=596 op=LOAD Sep 11 18:10:24.693000 audit: BPF prog-id=597 op=LOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1b1af31a5fd8 a2=98 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.693000 audit: BPF prog-id=597 op=UNLOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.693000 audit: BPF prog-id=598 op=LOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1b1af31a6290 a2=98 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.693000 audit: BPF prog-id=599 op=LOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1b1af31a5fe8 a2=98 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.693000 audit: BPF prog-id=599 op=UNLOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.693000 audit: BPF prog-id=598 op=UNLOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.693000 audit: BPF prog-id=600 op=LOAD Sep 11 18:10:24.693000 audit[12786]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1b1af31a64f0 a2=98 a3=0 items=0 ppid=12776 pid=12786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35336431356664373935323836323565636433376537643231 Sep 11 18:10:24.715868 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:24.719638 kernel: docker0: port 1(veth49baace) entered blocking state Sep 11 18:10:24.719672 kernel: docker0: port 1(veth49baace) entered disabled state Sep 11 18:10:24.721342 kernel: veth49baace: entered allmulticast mode Sep 11 18:10:24.714000 audit: ANOM_PROMISCUOUS dev=veth49baace prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:24.722547 kernel: veth49baace: entered promiscuous mode Sep 11 18:10:24.714000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f11c50 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.714000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:24.723000 audit[12808]: NETFILTER_CFG table=raw:254 family=2 entries=1 op=nft_register_rule pid=12808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:24.723000 audit[12808]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd12c36890 a2=0 a3=0 items=0 ppid=2991 pid=12808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:24.723000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:24.725396 systemd-networkd[2304]: veth49baace: Link UP Sep 11 18:10:24.735313 kernel: eth0: renamed from veth4c5fd74 Sep 11 18:10:24.735371 kernel: docker0: port 1(veth49baace) entered blocking state Sep 11 18:10:24.736834 kernel: docker0: port 1(veth49baace) entered forwarding state Sep 11 18:10:24.736510 systemd-networkd[2304]: veth49baace: Gained carrier Sep 11 18:10:24.736690 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:24.755476 dockerd[2991]: time="2026-09-11T18:10:24.755447508Z" level=info msg="sbJoin: gwep4 ''->'515c97ea3f9c', gwep6 ''->''" eid=515c97ea3f9c ep=relaxed_benz net=bridge nid=ad3b593e9776 Sep 11 18:10:24.826144 systemd[1]: Started sshd@102-4147-10.0.0.33:22-118.194.249.186:36430.service - OpenSSH per-connection server daemon (118.194.249.186:36430). Sep 11 18:10:24.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-4147-10.0.0.33:22-118.194.249.186:36430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:25.771309 sshd[12817]: Connection closed by authenticating user root 118.194.249.186 port 36430 [preauth] Sep 11 18:10:25.770000 audit[12817]: AUDIT1109 pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:25.773284 systemd[1]: sshd@102-4147-10.0.0.33:22-118.194.249.186:36430.service: Deactivated successfully. Sep 11 18:10:25.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-4147-10.0.0.33:22-118.194.249.186:36430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:25.783341 systemd[1]: docker-53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3.scope: Deactivated successfully. Sep 11 18:10:25.797036 containerd[2527]: time="2026-09-11T18:10:25.796881703Z" level=info msg="shim disconnected" id=53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3 namespace=moby Sep 11 18:10:25.798084 dockerd[2991]: time="2026-09-11T18:10:25.797347292Z" level=info msg="ignoring event" container=53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:25.798337 containerd[2527]: time="2026-09-11T18:10:25.797395279Z" level=info msg="cleaning up after shim disconnected" id=53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3 namespace=moby Sep 11 18:10:25.798337 containerd[2527]: time="2026-09-11T18:10:25.797414360Z" level=info msg="cleaning up dead shim" id=53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3 namespace=moby Sep 11 18:10:25.819923 systemd-networkd[2304]: veth49baace: Lost carrier Sep 11 18:10:25.820191 kernel: docker0: port 1(veth49baace) entered disabled state Sep 11 18:10:25.820220 kernel: veth4c5fd74: renamed from eth0 Sep 11 18:10:25.837000 audit[12844]: NETFILTER_CFG table=raw:255 family=2 entries=1 op=nft_unregister_rule pid=12844 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:25.837000 audit[12844]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffc0ab372a0 a2=0 a3=0 items=0 ppid=2991 pid=12844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:25.837000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:25.844966 systemd-networkd[2304]: veth49baace: Link DOWN Sep 11 18:10:25.846017 kernel: docker0: port 1(veth49baace) entered disabled state Sep 11 18:10:25.846064 kernel: veth49baace (unregistering): left allmulticast mode Sep 11 18:10:25.848481 kernel: veth49baace (unregistering): left promiscuous mode Sep 11 18:10:25.843000 audit: ANOM_PROMISCUOUS dev=veth49baace prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:25.849768 kernel: docker0: port 1(veth49baace) entered disabled state Sep 11 18:10:25.843000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811ffe8a0 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:25.843000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:25.857442 systemd[1]: run-docker-netns-9b31d4e13119.mount: Deactivated successfully. Sep 11 18:10:25.862023 systemd[1]: var-lib-docker-rootfs-overlayfs-53d15fd79528625ecd37e7d2104490722e47e8cd68b796f4525b8c25380c7ec3.mount: Deactivated successfully. Sep 11 18:10:25.882000 audit: BPF prog-id=596 op=UNLOAD Sep 11 18:10:25.882000 audit: BPF prog-id=600 op=UNLOAD Sep 11 18:10:25.964734 systemd[1]: tmp-containerd\x2dmount1534135085.mount: Deactivated successfully. Sep 11 18:10:25.990732 systemd[1]: var-lib-docker-rootfs-overlayfs-3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db.mount: Deactivated successfully. Sep 11 18:10:26.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-53-10.0.0.33:22-118.194.249.186:53502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:26.011300 systemd[1]: Started sshd@103-53-10.0.0.33:22-118.194.249.186:53502.service - OpenSSH per-connection server daemon (118.194.249.186:53502). Sep 11 18:10:26.075472 containerd[2527]: time="2026-09-11T18:10:26.075398946Z" level=info msg="connecting to shim 3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db" address="unix:///run/containerd/s/ce37708439e8517a82e1b083eff96b18125205d40e8177724240bd14772f8f17" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:26.098180 systemd[1]: Started docker-3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db.scope - libcontainer container 3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db. Sep 11 18:10:26.105000 audit: BPF prog-id=601 op=LOAD Sep 11 18:10:26.106000 audit: BPF prog-id=602 op=LOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f043ffbdfd8 a2=98 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.106000 audit: BPF prog-id=602 op=UNLOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.106000 audit: BPF prog-id=603 op=LOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f043ffbe290 a2=98 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.106000 audit: BPF prog-id=604 op=LOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=2f043ffbdfe8 a2=98 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.106000 audit: BPF prog-id=604 op=UNLOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.106000 audit: BPF prog-id=603 op=UNLOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.106000 audit: BPF prog-id=605 op=LOAD Sep 11 18:10:26.106000 audit[12877]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f043ffbe4f0 a2=98 a3=0 items=0 ppid=12866 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33653763353361383939656466313935653530323963616333 Sep 11 18:10:26.125694 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:26.128977 kernel: docker0: port 1(veth4e8d745) entered blocking state Sep 11 18:10:26.129043 kernel: docker0: port 1(veth4e8d745) entered disabled state Sep 11 18:10:26.130034 kernel: veth4e8d745: entered allmulticast mode Sep 11 18:10:26.124000 audit: ANOM_PROMISCUOUS dev=veth4e8d745 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:26.131124 kernel: veth4e8d745: entered promiscuous mode Sep 11 18:10:26.124000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811311410 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.124000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:26.133000 audit[12897]: NETFILTER_CFG table=raw:256 family=2 entries=1 op=nft_register_rule pid=12897 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:26.133000 audit[12897]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd4adfe3f0 a2=0 a3=0 items=0 ppid=2991 pid=12897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:26.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:26.134614 systemd-networkd[2304]: veth4e8d745: Link UP Sep 11 18:10:26.149023 kernel: eth0: renamed from veth0e871a2 Sep 11 18:10:26.149075 kernel: docker0: port 1(veth4e8d745) entered blocking state Sep 11 18:10:26.150745 kernel: docker0: port 1(veth4e8d745) entered forwarding state Sep 11 18:10:26.150759 systemd-networkd[2304]: veth4e8d745: Gained carrier Sep 11 18:10:26.151276 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:26.160033 dockerd[2991]: time="2026-09-11T18:10:26.159403870Z" level=info msg="sbJoin: gwep4 ''->'2bb18437f3aa', gwep6 ''->''" eid=2bb18437f3aa ep=practical_margulis net=bridge nid=ad3b593e9776 Sep 11 18:10:26.955855 sshd[12853]: Connection closed by authenticating user root 118.194.249.186 port 53502 [preauth] Sep 11 18:10:26.955000 audit[12853]: AUDIT1109 pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:26.957681 systemd[1]: sshd@103-53-10.0.0.33:22-118.194.249.186:53502.service: Deactivated successfully. Sep 11 18:10:26.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-53-10.0.0.33:22-118.194.249.186:53502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:27.187169 systemd[1]: docker-3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db.scope: Deactivated successfully. Sep 11 18:10:27.191162 systemd[1]: Started sshd@104-54-10.0.0.33:22-118.194.249.186:41808.service - OpenSSH per-connection server daemon (118.194.249.186:41808). Sep 11 18:10:27.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-54-10.0.0.33:22-118.194.249.186:41808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:27.196709 dockerd[2991]: time="2026-09-11T18:10:27.196669490Z" level=info msg="ignoring event" container=3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:27.197245 containerd[2527]: time="2026-09-11T18:10:27.197122949Z" level=info msg="shim disconnected" id=3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db namespace=moby Sep 11 18:10:27.197245 containerd[2527]: time="2026-09-11T18:10:27.197153166Z" level=info msg="cleaning up after shim disconnected" id=3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db namespace=moby Sep 11 18:10:27.197245 containerd[2527]: time="2026-09-11T18:10:27.197161071Z" level=info msg="cleaning up dead shim" id=3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db namespace=moby Sep 11 18:10:27.223857 systemd-networkd[2304]: veth4e8d745: Lost carrier Sep 11 18:10:27.224418 kernel: docker0: port 1(veth4e8d745) entered disabled state Sep 11 18:10:27.226022 kernel: veth0e871a2: renamed from eth0 Sep 11 18:10:27.251000 audit[12934]: NETFILTER_CFG table=raw:257 family=2 entries=1 op=nft_unregister_rule pid=12934 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:27.251000 audit[12934]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffd155e69c0 a2=0 a3=0 items=0 ppid=2991 pid=12934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.251000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:27.256715 systemd-networkd[2304]: veth4e8d745: Link DOWN Sep 11 18:10:27.259445 kernel: docker0: port 1(veth4e8d745) entered disabled state Sep 11 18:10:27.259495 kernel: veth4e8d745 (unregistering): left allmulticast mode Sep 11 18:10:27.260392 kernel: veth4e8d745 (unregistering): left promiscuous mode Sep 11 18:10:27.255000 audit: ANOM_PROMISCUOUS dev=veth4e8d745 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:27.261338 kernel: docker0: port 1(veth4e8d745) entered disabled state Sep 11 18:10:27.255000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811dbaa20 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.255000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:27.270110 systemd[1]: run-docker-netns-9d817c41d67c.mount: Deactivated successfully. Sep 11 18:10:27.271814 systemd[1]: var-lib-docker-rootfs-overlayfs-3e7c53a899edf195e5029cac319fe7eea5a17be5302b29131210216d3625a7db.mount: Deactivated successfully. Sep 11 18:10:27.293000 audit: BPF prog-id=601 op=UNLOAD Sep 11 18:10:27.293000 audit: BPF prog-id=605 op=UNLOAD Sep 11 18:10:27.487365 containerd[2527]: time="2026-09-11T18:10:27.486849393Z" level=info msg="connecting to shim 2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7" address="unix:///run/containerd/s/dfd54292109ae41a28ddf3d21e8b142ba8a9eefc7a32914a570ca690ebf01c68" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:27.506339 systemd[1]: Started docker-2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7.scope - libcontainer container 2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7. Sep 11 18:10:27.514000 audit: BPF prog-id=606 op=LOAD Sep 11 18:10:27.514000 audit: BPF prog-id=607 op=LOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=4b4b8341fd8 a2=98 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.514000 audit: BPF prog-id=607 op=UNLOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.514000 audit: BPF prog-id=608 op=LOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=4b4b8342290 a2=98 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.514000 audit: BPF prog-id=609 op=LOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=4b4b8341fe8 a2=98 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.514000 audit: BPF prog-id=609 op=UNLOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.514000 audit: BPF prog-id=608 op=UNLOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.514000 audit: BPF prog-id=610 op=LOAD Sep 11 18:10:27.514000 audit[12963]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=4b4b83424f0 a2=98 a3=0 items=0 ppid=12952 pid=12963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32613539646561303832363337373230616462306166396464 Sep 11 18:10:27.534552 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:27.537721 kernel: docker0: port 1(vethcbe1395) entered blocking state Sep 11 18:10:27.537754 kernel: docker0: port 1(vethcbe1395) entered disabled state Sep 11 18:10:27.537771 kernel: vethcbe1395: entered allmulticast mode Sep 11 18:10:27.539554 kernel: vethcbe1395: entered promiscuous mode Sep 11 18:10:27.533000 audit: ANOM_PROMISCUOUS dev=vethcbe1395 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:27.533000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b66de0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.533000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:27.541000 audit[12986]: NETFILTER_CFG table=raw:258 family=2 entries=1 op=nft_register_rule pid=12986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:27.541000 audit[12986]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffd592a2270 a2=0 a3=0 items=0 ppid=2991 pid=12986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:27.541000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:27.543341 systemd-networkd[2304]: vethcbe1395: Link UP Sep 11 18:10:27.552027 kernel: eth0: renamed from veth4f41c7f Sep 11 18:10:27.555033 kernel: docker0: port 1(vethcbe1395) entered blocking state Sep 11 18:10:27.554725 systemd-networkd[2304]: vethcbe1395: Gained carrier Sep 11 18:10:27.555135 kernel: docker0: port 1(vethcbe1395) entered forwarding state Sep 11 18:10:27.555269 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:27.562573 dockerd[2991]: time="2026-09-11T18:10:27.562545102Z" level=info msg="sbJoin: gwep4 ''->'c85a2c26149e', gwep6 ''->''" eid=c85a2c26149e ep=lucid_lewin net=bridge nid=ad3b593e9776 Sep 11 18:10:28.122443 sshd[12915]: Connection closed by authenticating user root 118.194.249.186 port 41808 [preauth] Sep 11 18:10:28.121000 audit[12915]: AUDIT1109 pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:28.124230 systemd[1]: sshd@104-54-10.0.0.33:22-118.194.249.186:41808.service: Deactivated successfully. Sep 11 18:10:28.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-54-10.0.0.33:22-118.194.249.186:41808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:28.370372 systemd[1]: Started sshd@105-4148-10.0.0.33:22-118.194.249.186:54696.service - OpenSSH per-connection server daemon (118.194.249.186:54696). Sep 11 18:10:28.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-4148-10.0.0.33:22-118.194.249.186:54696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:28.587283 systemd[1]: docker-2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7.scope: Deactivated successfully. Sep 11 18:10:28.599627 dockerd[2991]: time="2026-09-11T18:10:28.599589311Z" level=info msg="ignoring event" container=2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:28.600641 containerd[2527]: time="2026-09-11T18:10:28.600591640Z" level=info msg="shim disconnected" id=2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7 namespace=moby Sep 11 18:10:28.600641 containerd[2527]: time="2026-09-11T18:10:28.600638294Z" level=info msg="cleaning up after shim disconnected" id=2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7 namespace=moby Sep 11 18:10:28.600965 containerd[2527]: time="2026-09-11T18:10:28.600645376Z" level=info msg="cleaning up dead shim" id=2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7 namespace=moby Sep 11 18:10:28.623587 kernel: docker0: port 1(vethcbe1395) entered disabled state Sep 11 18:10:28.623658 kernel: veth4f41c7f: renamed from eth0 Sep 11 18:10:28.623705 systemd-networkd[2304]: vethcbe1395: Lost carrier Sep 11 18:10:28.637000 audit[13023]: NETFILTER_CFG table=raw:259 family=2 entries=1 op=nft_unregister_rule pid=13023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:28.637000 audit[13023]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffddd7c7120 a2=0 a3=0 items=0 ppid=2991 pid=13023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.637000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:28.648465 systemd-networkd[2304]: vethcbe1395: Link DOWN Sep 11 18:10:28.650020 kernel: docker0: port 1(vethcbe1395) entered disabled state Sep 11 18:10:28.647000 audit: ANOM_PROMISCUOUS dev=vethcbe1395 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:28.654273 kernel: vethcbe1395 (unregistering): left allmulticast mode Sep 11 18:10:28.654351 kernel: vethcbe1395 (unregistering): left promiscuous mode Sep 11 18:10:28.654416 kernel: docker0: port 1(vethcbe1395) entered disabled state Sep 11 18:10:28.654477 kernel: kauditd_printk_skb: 114 callbacks suppressed Sep 11 18:10:28.654544 kernel: audit: type=1700 audit(1789150228.647:2195): dev=vethcbe1395 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:28.647000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca810ac6840 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.661025 kernel: audit: type=1300 audit(1789150228.647:2195): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca810ac6840 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.647000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:28.661446 kernel: audit: type=1327 audit(1789150228.647:2195): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:28.665161 systemd[1]: run-docker-netns-a36f6d6d35ed.mount: Deactivated successfully. Sep 11 18:10:28.670214 systemd[1]: var-lib-docker-rootfs-overlayfs-2a59dea082637720adb0af9dd4a8a0fa95aa23ee9e8b39680db92fef8fb919e7.mount: Deactivated successfully. Sep 11 18:10:28.676000 audit: BPF prog-id=606 op=UNLOAD Sep 11 18:10:28.676000 audit: BPF prog-id=610 op=UNLOAD Sep 11 18:10:28.679154 kernel: audit: type=1334 audit(1789150228.676:2196): prog-id=606 op=UNLOAD Sep 11 18:10:28.679178 kernel: audit: type=1334 audit(1789150228.676:2197): prog-id=610 op=UNLOAD Sep 11 18:10:28.899021 containerd[2527]: time="2026-09-11T18:10:28.898964013Z" level=info msg="connecting to shim 573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e" address="unix:///run/containerd/s/5e0796194989c2028e1ece0836499eb73bf0e6a0080043c7af4324ad07d563f0" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:28.920191 systemd[1]: Started docker-573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e.scope - libcontainer container 573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e. Sep 11 18:10:28.927000 audit: BPF prog-id=611 op=LOAD Sep 11 18:10:28.930097 kernel: audit: type=1334 audit(1789150228.927:2198): prog-id=611 op=LOAD Sep 11 18:10:28.927000 audit: BPF prog-id=612 op=LOAD Sep 11 18:10:28.927000 audit[13052]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a3aa4823fd8 a2=98 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.934148 kernel: audit: type=1334 audit(1789150228.927:2199): prog-id=612 op=LOAD Sep 11 18:10:28.934188 kernel: audit: type=1300 audit(1789150228.927:2199): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a3aa4823fd8 a2=98 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.938105 kernel: audit: type=1327 audit(1789150228.927:2199): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.927000 audit: BPF prog-id=612 op=UNLOAD Sep 11 18:10:28.939173 kernel: audit: type=1334 audit(1789150228.927:2200): prog-id=612 op=UNLOAD Sep 11 18:10:28.927000 audit[13052]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.928000 audit: BPF prog-id=613 op=LOAD Sep 11 18:10:28.928000 audit[13052]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a3aa4824290 a2=98 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.928000 audit: BPF prog-id=614 op=LOAD Sep 11 18:10:28.928000 audit[13052]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=3a3aa4823fe8 a2=98 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.928000 audit: BPF prog-id=614 op=UNLOAD Sep 11 18:10:28.928000 audit[13052]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.928000 audit: BPF prog-id=613 op=UNLOAD Sep 11 18:10:28.928000 audit[13052]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.928000 audit: BPF prog-id=615 op=LOAD Sep 11 18:10:28.928000 audit[13052]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3a3aa48244f0 a2=98 a3=0 items=0 ppid=13041 pid=13052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373364313637643466343039316238383434383433336632 Sep 11 18:10:28.961279 kernel: docker0: port 1(veth560a29c) entered blocking state Sep 11 18:10:28.961333 kernel: docker0: port 1(veth560a29c) entered disabled state Sep 11 18:10:28.962065 kernel: veth560a29c: entered allmulticast mode Sep 11 18:10:28.963202 kernel: veth560a29c: entered promiscuous mode Sep 11 18:10:28.957000 audit: ANOM_PROMISCUOUS dev=veth560a29c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:28.957000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811b67560 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.957000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:28.964648 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:28.965000 audit[13073]: NETFILTER_CFG table=raw:260 family=2 entries=1 op=nft_register_rule pid=13073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:28.965000 audit[13073]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7fff076cc5d0 a2=0 a3=0 items=0 ppid=2991 pid=13073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:28.965000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:28.967125 systemd-networkd[2304]: veth560a29c: Link UP Sep 11 18:10:28.993207 kernel: eth0: renamed from veth44457f2 Sep 11 18:10:28.993427 kernel: docker0: port 1(veth560a29c) entered blocking state Sep 11 18:10:28.993451 kernel: docker0: port 1(veth560a29c) entered forwarding state Sep 11 18:10:28.993787 systemd-networkd[2304]: veth560a29c: Gained carrier Sep 11 18:10:28.993966 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:29.001955 dockerd[2991]: time="2026-09-11T18:10:29.001921761Z" level=info msg="sbJoin: gwep4 ''->'24a4677ab726', gwep6 ''->''" eid=24a4677ab726 ep=optimistic_gould net=bridge nid=ad3b593e9776 Sep 11 18:10:29.319412 sshd[12997]: Connection closed by authenticating user root 118.194.249.186 port 54696 [preauth] Sep 11 18:10:29.318000 audit[12997]: AUDIT1109 pid=12997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:29.321296 systemd[1]: sshd@105-4148-10.0.0.33:22-118.194.249.186:54696.service: Deactivated successfully. Sep 11 18:10:29.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-4148-10.0.0.33:22-118.194.249.186:54696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:29.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-55-10.0.0.33:22-118.194.249.186:48012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:29.595217 systemd[1]: Started sshd@106-55-10.0.0.33:22-118.194.249.186:48012.service - OpenSSH per-connection server daemon (118.194.249.186:48012). Sep 11 18:10:30.040353 systemd[1]: docker-573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e.scope: Deactivated successfully. Sep 11 18:10:30.053921 dockerd[2991]: time="2026-09-11T18:10:30.053873971Z" level=info msg="ignoring event" container=573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:30.054293 containerd[2527]: time="2026-09-11T18:10:30.053941719Z" level=info msg="shim disconnected" id=573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e namespace=moby Sep 11 18:10:30.054293 containerd[2527]: time="2026-09-11T18:10:30.053973610Z" level=info msg="cleaning up after shim disconnected" id=573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e namespace=moby Sep 11 18:10:30.054293 containerd[2527]: time="2026-09-11T18:10:30.053981950Z" level=info msg="cleaning up dead shim" id=573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e namespace=moby Sep 11 18:10:30.083536 kernel: docker0: port 1(veth560a29c) entered disabled state Sep 11 18:10:30.083601 kernel: veth44457f2: renamed from eth0 Sep 11 18:10:30.083547 systemd-networkd[2304]: veth560a29c: Lost carrier Sep 11 18:10:30.101000 audit[13107]: NETFILTER_CFG table=raw:261 family=2 entries=1 op=nft_unregister_rule pid=13107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:30.101000 audit[13107]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffeda5a3940 a2=0 a3=0 items=0 ppid=2991 pid=13107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.101000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:30.107719 systemd-networkd[2304]: veth560a29c: Link DOWN Sep 11 18:10:30.110869 kernel: docker0: port 1(veth560a29c) entered disabled state Sep 11 18:10:30.110920 kernel: veth560a29c (unregistering): left allmulticast mode Sep 11 18:10:30.112230 kernel: veth560a29c (unregistering): left promiscuous mode Sep 11 18:10:30.106000 audit: ANOM_PROMISCUOUS dev=veth560a29c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:30.113308 kernel: docker0: port 1(veth560a29c) entered disabled state Sep 11 18:10:30.106000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811c8ad00 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.106000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:30.125484 systemd[1]: run-docker-netns-70d78812e9af.mount: Deactivated successfully. Sep 11 18:10:30.128467 systemd[1]: var-lib-docker-rootfs-overlayfs-573d167d4f4091b88448433f2421eb98aaf4f7e5a7eb27987701537b37ca320e.mount: Deactivated successfully. Sep 11 18:10:30.138000 audit: BPF prog-id=611 op=UNLOAD Sep 11 18:10:30.138000 audit: BPF prog-id=615 op=UNLOAD Sep 11 18:10:30.301963 sshd[13083]: Invalid user user from 118.194.249.186 port 48012 Sep 11 18:10:30.360440 containerd[2527]: time="2026-09-11T18:10:30.360394009Z" level=info msg="connecting to shim b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04" address="unix:///run/containerd/s/69b9e056032fad8a93b58c3ee2d1ed07d8249e52b316fd089a43999a27336acb" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:30.379175 systemd[1]: Started docker-b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04.scope - libcontainer container b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04. Sep 11 18:10:30.387000 audit: BPF prog-id=616 op=LOAD Sep 11 18:10:30.387000 audit: BPF prog-id=617 op=LOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c88db1f9fd8 a2=98 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.387000 audit: BPF prog-id=617 op=UNLOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.387000 audit: BPF prog-id=618 op=LOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c88db1fa290 a2=98 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.387000 audit: BPF prog-id=619 op=LOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1c88db1f9fe8 a2=98 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.387000 audit: BPF prog-id=619 op=UNLOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.387000 audit: BPF prog-id=618 op=UNLOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.387000 audit: BPF prog-id=620 op=LOAD Sep 11 18:10:30.387000 audit[13135]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1c88db1fa4f0 a2=98 a3=0 items=0 ppid=13124 pid=13135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62353039323862633038613433356135666363613964616130 Sep 11 18:10:30.412672 kernel: docker0: port 1(veth686ad7f) entered blocking state Sep 11 18:10:30.413052 kernel: docker0: port 1(veth686ad7f) entered disabled state Sep 11 18:10:30.413078 kernel: veth686ad7f: entered allmulticast mode Sep 11 18:10:30.414080 kernel: veth686ad7f: entered promiscuous mode Sep 11 18:10:30.409000 audit: ANOM_PROMISCUOUS dev=veth686ad7f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:30.409000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f100c0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.409000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:30.414793 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:30.416000 audit[13157]: NETFILTER_CFG table=raw:262 family=2 entries=1 op=nft_register_rule pid=13157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:30.416000 audit[13157]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffde4448180 a2=0 a3=0 items=0 ppid=2991 pid=13157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:30.416000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:30.418291 systemd-networkd[2304]: veth686ad7f: Link UP Sep 11 18:10:30.426107 kernel: eth0: renamed from vethfa8a26f Sep 11 18:10:30.426281 kernel: docker0: port 1(veth686ad7f) entered blocking state Sep 11 18:10:30.426358 kernel: docker0: port 1(veth686ad7f) entered forwarding state Sep 11 18:10:30.426777 systemd-networkd[2304]: veth686ad7f: Gained carrier Sep 11 18:10:30.426971 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:30.436021 dockerd[2991]: time="2026-09-11T18:10:30.434736599Z" level=info msg="sbJoin: gwep4 ''->'6893ecea4f64', gwep6 ''->''" eid=6893ecea4f64 ep=gallant_turing net=bridge nid=ad3b593e9776 Sep 11 18:10:30.525743 sshd[13083]: Connection closed by invalid user user 118.194.249.186 port 48012 [preauth] Sep 11 18:10:30.525000 audit[13083]: AUDIT1109 pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:30.527273 systemd[1]: sshd@106-55-10.0.0.33:22-118.194.249.186:48012.service: Deactivated successfully. Sep 11 18:10:30.526000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-55-10.0.0.33:22-118.194.249.186:48012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:30.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-56-10.0.0.33:22-118.194.249.186:57516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:30.774270 systemd[1]: Started sshd@107-56-10.0.0.33:22-118.194.249.186:57516.service - OpenSSH per-connection server daemon (118.194.249.186:57516). Sep 11 18:10:31.461951 systemd[1]: docker-b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04.scope: Deactivated successfully. Sep 11 18:10:31.474842 dockerd[2991]: time="2026-09-11T18:10:31.474767406Z" level=info msg="ignoring event" container=b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:31.475168 containerd[2527]: time="2026-09-11T18:10:31.475074215Z" level=info msg="shim disconnected" id=b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04 namespace=moby Sep 11 18:10:31.475168 containerd[2527]: time="2026-09-11T18:10:31.475104053Z" level=info msg="cleaning up after shim disconnected" id=b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04 namespace=moby Sep 11 18:10:31.475168 containerd[2527]: time="2026-09-11T18:10:31.475112105Z" level=info msg="cleaning up dead shim" id=b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04 namespace=moby Sep 11 18:10:31.476093 containerd[2527]: time="2026-09-11T18:10:31.476039393Z" level=error msg="failed sending message on channel" error="write unix /run/containerd/containerd.sock.ttrpc->@: write: broken pipe" Sep 11 18:10:31.491571 sshd[13169]: Invalid user user from 118.194.249.186 port 57516 Sep 11 18:10:31.503488 systemd-networkd[2304]: veth686ad7f: Lost carrier Sep 11 18:10:31.504025 kernel: docker0: port 1(veth686ad7f) entered disabled state Sep 11 18:10:31.505035 kernel: vethfa8a26f: renamed from eth0 Sep 11 18:10:31.522000 audit[13194]: NETFILTER_CFG table=raw:263 family=2 entries=1 op=nft_unregister_rule pid=13194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:31.522000 audit[13194]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffec8e74800 a2=0 a3=0 items=0 ppid=2991 pid=13194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:31.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:31.528703 systemd-networkd[2304]: veth686ad7f: Link DOWN Sep 11 18:10:31.530026 kernel: docker0: port 1(veth686ad7f) entered disabled state Sep 11 18:10:31.532586 kernel: veth686ad7f (unregistering): left allmulticast mode Sep 11 18:10:31.532637 kernel: veth686ad7f (unregistering): left promiscuous mode Sep 11 18:10:31.527000 audit: ANOM_PROMISCUOUS dev=veth686ad7f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:31.533690 kernel: docker0: port 1(veth686ad7f) entered disabled state Sep 11 18:10:31.527000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811f76f60 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:31.527000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:31.545502 systemd[1]: run-docker-netns-cf2d96899704.mount: Deactivated successfully. Sep 11 18:10:31.549125 systemd[1]: var-lib-docker-rootfs-overlayfs-b50928bc08a435a5fcca9daa03e6c82bc67b24655b6beafac6ea58b86abbed04.mount: Deactivated successfully. Sep 11 18:10:31.560000 audit: BPF prog-id=616 op=UNLOAD Sep 11 18:10:31.560000 audit: BPF prog-id=620 op=UNLOAD Sep 11 18:10:31.645724 sshd[4550]: Connection closed by 20.61.25.254 port 58266 Sep 11 18:10:31.646229 sshd-session[4546]: pam_unix(sshd:session): session closed for user core Sep 11 18:10:31.645000 audit[4546]: AUDIT1106 pid=4546 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:31.645000 audit[4546]: AUDIT1104 pid=4546 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:31.648865 systemd[1]: sshd@23-4109-10.0.0.33:22-20.61.25.254:58266.service: Deactivated successfully. Sep 11 18:10:31.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4109-10.0.0.33:22-20.61.25.254:58266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.650267 systemd[1]: session-27.scope: Deactivated successfully. Sep 11 18:10:31.650467 systemd[1]: session-27.scope: Consumed 1.593s CPU time over 2min 21.470s wall clock time, 16.9M memory peak. Sep 11 18:10:31.650942 systemd-logind[2508]: Session 27 logged out. Waiting for processes to exit. Sep 11 18:10:31.652351 systemd-logind[2508]: Removed session 27. Sep 11 18:10:31.672480 systemd[1]: Started sshd@108-4149-10.0.0.33:22-20.61.25.254:57332.service - OpenSSH per-connection server daemon (20.61.25.254:57332). Sep 11 18:10:31.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-4149-10.0.0.33:22-20.61.25.254:57332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.722315 sshd[13169]: Connection closed by invalid user user 118.194.249.186 port 57516 [preauth] Sep 11 18:10:31.721000 audit[13169]: AUDIT1109 pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:31.722971 systemd[1]: sshd@107-56-10.0.0.33:22-118.194.249.186:57516.service: Deactivated successfully. Sep 11 18:10:31.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-56-10.0.0.33:22-118.194.249.186:57516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.779000 audit[13199]: AUDIT1101 pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:31.780623 sshd[13199]: Accepted publickey for core from 20.61.25.254 port 57332 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:10:31.780000 audit[13199]: AUDIT1103 pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:31.780000 audit[13199]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff2f7b56d0 a2=3 a3=0 items=0 ppid=1 pid=13199 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:31.780000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:10:31.781619 sshd-session[13199]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:10:31.786184 systemd-logind[2508]: New session '28' of user 'core' with class 'user' and type 'tty'. Sep 11 18:10:31.800176 systemd[1]: Started session-28.scope - Session 28 of User core. Sep 11 18:10:31.800000 audit[13199]: AUDIT1105 pid=13199 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:31.802000 audit[13205]: AUDIT1103 pid=13205 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:31.824000 audit[13210]: AUDIT1101 pid=13210 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.825263 sudo[13210]: core : PWD=/tmp/tmp.rqyKJKvRMv ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/capsh /usr/bin/sh /usr/bin/grep /usr/bin/cat /usr/bin/ls Sep 11 18:10:31.825472 sudo[13210]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:10:31.824000 audit[13210]: AUDIT1110 pid=13210 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.824000 audit[13210]: AUDIT1105 pid=13210 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.931438 sudo[13210]: pam_unix(sudo:session): session closed for user root Sep 11 18:10:31.930000 audit[13210]: AUDIT1106 pid=13210 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.930000 audit[13210]: AUDIT1104 pid=13210 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.935000 audit[13235]: AUDIT1101 pid=13235 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.936168 sudo[13235]: core : PWD=/tmp/tmp.rqyKJKvRMv ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/capsh /usr/bin/sh /usr/bin/grep /usr/bin/cat /usr/bin/ls /lib64/ld-linux-x86-64.so.2 /lib64/libc.so.6 /lib64/libcap.so.2 /lib64/libpcre2-8.so.0 /lib64/libreadline.so.8 /lib64/libselinux.so.1 /lib64/libtinfo.so.6 /lib64/libtinfow.so.6 ./ Sep 11 18:10:31.936382 sudo[13235]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:10:31.935000 audit[13235]: AUDIT1110 pid=13235 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.935000 audit[13235]: AUDIT1105 pid=13235 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.951244 systemd[1]: Started sshd@109-57-10.0.0.33:22-118.194.249.186:43836.service - OpenSSH per-connection server daemon (118.194.249.186:43836). Sep 11 18:10:31.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-57-10.0.0.33:22-118.194.249.186:43836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.969046 sudo[13235]: pam_unix(sudo:session): session closed for user root Sep 11 18:10:31.968000 audit[13235]: AUDIT1106 pid=13235 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.968000 audit[13235]: AUDIT1104 pid=13235 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.972000 audit[13206]: AUDIT1101 pid=13206 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.973584 sudo[13206]: core : PWD=/tmp/tmp.rqyKJKvRMv ; USER=root ; COMMAND=/usr/sbin/docker build -t captest . Sep 11 18:10:31.972000 audit[13206]: AUDIT1110 pid=13206 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.972000 audit[13206]: AUDIT1105 pid=13206 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:31.973787 sudo[13206]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Sep 11 18:10:32.324980 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount4093462456.mount: Deactivated successfully. Sep 11 18:10:32.337779 dockerd[2991]: time="2026-09-11T18:10:32.337739626Z" level=warning msg="forcibly turning on oci-mediatype mode for attestations" span="exporting to image" spanID=1b210b66f4a921bc traceID=f89dcead76c44f754e98963bd3195ca0 Sep 11 18:10:32.515271 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:32.632749 systemd[1]: tmp-containerd\x2dmount2512757061.mount: Deactivated successfully. Sep 11 18:10:32.648518 sshd[13241]: Invalid user user from 118.194.249.186 port 43836 Sep 11 18:10:32.874599 sshd[13241]: Connection closed by invalid user user 118.194.249.186 port 43836 [preauth] Sep 11 18:10:32.874000 audit[13241]: AUDIT1109 pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:32.877299 systemd[1]: sshd@109-57-10.0.0.33:22-118.194.249.186:43836.service: Deactivated successfully. Sep 11 18:10:32.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-57-10.0.0.33:22-118.194.249.186:43836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-58-10.0.0.33:22-118.194.249.186:55932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.108874 systemd[1]: Started sshd@110-58-10.0.0.33:22-118.194.249.186:55932.service - OpenSSH per-connection server daemon (118.194.249.186:55932). Sep 11 18:10:33.116994 sudo[13206]: pam_unix(sudo:session): session closed for user root Sep 11 18:10:33.116000 audit[13206]: AUDIT1106 pid=13206 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.116000 audit[13206]: AUDIT1104 pid=13206 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.131750 sshd[13205]: Connection closed by 20.61.25.254 port 57332 Sep 11 18:10:33.131000 audit[13199]: AUDIT1106 pid=13199 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.131000 audit[13199]: AUDIT1104 pid=13199 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.132093 sshd-session[13199]: pam_unix(sshd:session): session closed for user core Sep 11 18:10:33.134643 systemd[1]: sshd@108-4149-10.0.0.33:22-20.61.25.254:57332.service: Deactivated successfully. Sep 11 18:10:33.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-4149-10.0.0.33:22-20.61.25.254:57332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.135887 systemd[1]: session-28.scope: Deactivated successfully. Sep 11 18:10:33.136539 systemd-logind[2508]: Session 28 logged out. Waiting for processes to exit. Sep 11 18:10:33.137556 systemd-logind[2508]: Removed session 28. Sep 11 18:10:33.154683 systemd[1]: Started sshd@111-4150-10.0.0.33:22-20.61.25.254:57340.service - OpenSSH per-connection server daemon (20.61.25.254:57340). Sep 11 18:10:33.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-4150-10.0.0.33:22-20.61.25.254:57340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.262000 audit[13315]: AUDIT1101 pid=13315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.263665 sshd[13315]: Accepted publickey for core from 20.61.25.254 port 57340 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:10:33.263000 audit[13315]: AUDIT1103 pid=13315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.263000 audit[13315]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc4aed5750 a2=3 a3=0 items=0 ppid=1 pid=13315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.263000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:10:33.264666 sshd-session[13315]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:10:33.268513 systemd-logind[2508]: New session '29' of user 'core' with class 'user' and type 'tty'. Sep 11 18:10:33.279136 systemd[1]: Started session-29.scope - Session 29 of User core. Sep 11 18:10:33.280000 audit[13315]: AUDIT1105 pid=13315 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.281000 audit[13319]: AUDIT1103 pid=13319 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.340468 systemd[1]: tmp-containerd\x2dmount3304668201.mount: Deactivated successfully. Sep 11 18:10:33.567532 containerd[2527]: time="2026-09-11T18:10:33.567483365Z" level=info msg="connecting to shim 7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf" address="unix:///run/containerd/s/f66022bb407c2c028eea76bf9fac2f834437967432b148352bbde964204dccb3" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:33.588169 systemd[1]: Started docker-7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf.scope - libcontainer container 7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf. Sep 11 18:10:33.595000 audit: BPF prog-id=621 op=LOAD Sep 11 18:10:33.596000 audit: BPF prog-id=622 op=LOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b3e7bc95fd8 a2=98 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.596000 audit: BPF prog-id=622 op=UNLOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.596000 audit: BPF prog-id=623 op=LOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b3e7bc96290 a2=98 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.596000 audit: BPF prog-id=624 op=LOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=b3e7bc95fe8 a2=98 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.596000 audit: BPF prog-id=624 op=UNLOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.596000 audit: BPF prog-id=623 op=UNLOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.596000 audit: BPF prog-id=625 op=LOAD Sep 11 18:10:33.596000 audit[13349]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=b3e7bc964f0 a2=98 a3=0 items=0 ppid=13338 pid=13349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37633331363764323733333733356230346661353261323866 Sep 11 18:10:33.621037 kernel: docker0: port 1(veth0395d3f) entered blocking state Sep 11 18:10:33.621113 kernel: docker0: port 1(veth0395d3f) entered disabled state Sep 11 18:10:33.623152 kernel: veth0395d3f: entered allmulticast mode Sep 11 18:10:33.617000 audit: ANOM_PROMISCUOUS dev=veth0395d3f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:33.623297 kernel: veth0395d3f: entered promiscuous mode Sep 11 18:10:33.617000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca810d4d500 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.617000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:33.625000 audit[13369]: NETFILTER_CFG table=raw:264 family=2 entries=1 op=nft_register_rule pid=13369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:33.625000 audit[13369]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffed8081870 a2=0 a3=0 items=0 ppid=2991 pid=13369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.625000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:33.626528 systemd-networkd[2304]: veth0395d3f: Link UP Sep 11 18:10:33.641568 kernel: eth0: renamed from veth7ddd194 Sep 11 18:10:33.641686 kernel: docker0: port 1(veth0395d3f) entered blocking state Sep 11 18:10:33.642802 kernel: docker0: port 1(veth0395d3f) entered forwarding state Sep 11 18:10:33.642932 systemd-networkd[2304]: veth0395d3f: Gained carrier Sep 11 18:10:33.643469 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:33.654554 dockerd[2991]: time="2026-09-11T18:10:33.651228312Z" level=info msg="sbJoin: gwep4 ''->'278220f011e3', gwep6 ''->''" eid=278220f011e3 ep=vigorous_jang net=bridge nid=ad3b593e9776 Sep 11 18:10:33.681912 systemd[1]: docker-7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf.scope: Deactivated successfully. Sep 11 18:10:33.697894 dockerd[2991]: time="2026-09-11T18:10:33.697863857Z" level=info msg="ignoring event" container=7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:33.698093 containerd[2527]: time="2026-09-11T18:10:33.698066124Z" level=info msg="shim disconnected" id=7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf namespace=moby Sep 11 18:10:33.698178 containerd[2527]: time="2026-09-11T18:10:33.698167124Z" level=info msg="cleaning up after shim disconnected" id=7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf namespace=moby Sep 11 18:10:33.698221 containerd[2527]: time="2026-09-11T18:10:33.698213299Z" level=info msg="cleaning up dead shim" id=7c3167d2733735b04fa52a28f0e9363b5fc3944f323d2144669bb903a621aadf namespace=moby Sep 11 18:10:33.723480 kernel: docker0: port 1(veth0395d3f) entered disabled state Sep 11 18:10:33.723544 kernel: veth7ddd194: renamed from eth0 Sep 11 18:10:33.723647 systemd-networkd[2304]: veth0395d3f: Lost carrier Sep 11 18:10:33.745000 audit[13403]: NETFILTER_CFG table=raw:265 family=2 entries=1 op=nft_unregister_rule pid=13403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:33.747332 kernel: kauditd_printk_skb: 144 callbacks suppressed Sep 11 18:10:33.747374 kernel: audit: type=1325 audit(1789150233.745:2281): table=raw:265 family=2 entries=1 op=nft_unregister_rule pid=13403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:33.745000 audit[13403]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffed3baac80 a2=0 a3=0 items=0 ppid=2991 pid=13403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.754213 kernel: audit: type=1300 audit(1789150233.745:2281): arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffed3baac80 a2=0 a3=0 items=0 ppid=2991 pid=13403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.745000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:33.757341 kernel: audit: type=1327 audit(1789150233.745:2281): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:33.757913 systemd-networkd[2304]: veth0395d3f: Link DOWN Sep 11 18:10:33.760056 kernel: docker0: port 1(veth0395d3f) entered disabled state Sep 11 18:10:33.760105 kernel: veth0395d3f (unregistering): left allmulticast mode Sep 11 18:10:33.762433 kernel: veth0395d3f (unregistering): left promiscuous mode Sep 11 18:10:33.756000 audit: ANOM_PROMISCUOUS dev=veth0395d3f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:33.764412 kernel: docker0: port 1(veth0395d3f) entered disabled state Sep 11 18:10:33.764568 kernel: audit: type=1700 audit(1789150233.756:2282): dev=veth0395d3f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:33.756000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e900 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.756000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:33.781563 kernel: audit: type=1300 audit(1789150233.756:2282): arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4e900 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.781600 kernel: audit: type=1327 audit(1789150233.756:2282): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:33.795000 audit: BPF prog-id=621 op=UNLOAD Sep 11 18:10:33.795000 audit: BPF prog-id=625 op=UNLOAD Sep 11 18:10:33.798575 kernel: audit: type=1334 audit(1789150233.795:2283): prog-id=621 op=UNLOAD Sep 11 18:10:33.798599 kernel: audit: type=1334 audit(1789150233.795:2284): prog-id=625 op=UNLOAD Sep 11 18:10:33.808732 sshd[13307]: Invalid user user from 118.194.249.186 port 55932 Sep 11 18:10:33.860959 sshd[13319]: Connection closed by 20.61.25.254 port 57340 Sep 11 18:10:33.862549 sshd-session[13315]: pam_unix(sshd:session): session closed for user core Sep 11 18:10:33.861000 audit[13315]: AUDIT1106 pid=13315 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.862000 audit[13315]: AUDIT1104 pid=13315 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.871420 kernel: audit: type=1106 audit(1789150233.861:2285): pid=13315 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.868514 systemd[1]: sshd@111-4150-10.0.0.33:22-20.61.25.254:57340.service: Deactivated successfully. Sep 11 18:10:33.871530 kernel: audit: type=1104 audit(1789150233.862:2286): pid=13315 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-4150-10.0.0.33:22-20.61.25.254:57340 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.871890 systemd[1]: session-29.scope: Deactivated successfully. Sep 11 18:10:33.872922 systemd-logind[2508]: Session 29 logged out. Waiting for processes to exit. Sep 11 18:10:33.873721 systemd-logind[2508]: Removed session 29. Sep 11 18:10:33.889271 systemd[1]: Started sshd@112-59-10.0.0.33:22-20.61.25.254:57354.service - OpenSSH per-connection server daemon (20.61.25.254:57354). Sep 11 18:10:33.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-59-10.0.0.33:22-20.61.25.254:57354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:33.991000 audit[13408]: AUDIT1101 pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.992937 sshd[13408]: Accepted publickey for core from 20.61.25.254 port 57354 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:10:33.992000 audit[13408]: AUDIT1103 pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:33.992000 audit[13408]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb73130f0 a2=3 a3=0 items=0 ppid=1 pid=13408 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:33.992000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:10:33.993922 sshd-session[13408]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:10:33.997889 systemd-logind[2508]: New session '30' of user 'core' with class 'user' and type 'tty'. Sep 11 18:10:34.003118 systemd[1]: Started session-30.scope - Session 30 of User core. Sep 11 18:10:34.003000 audit[13408]: AUDIT1105 pid=13408 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:34.005000 audit[13412]: AUDIT1103 pid=13412 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:34.033252 sshd[13307]: Connection closed by invalid user user 118.194.249.186 port 55932 [preauth] Sep 11 18:10:34.032000 audit[13307]: AUDIT1109 pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:34.034726 systemd[1]: sshd@110-58-10.0.0.33:22-118.194.249.186:55932.service: Deactivated successfully. Sep 11 18:10:34.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-58-10.0.0.33:22-118.194.249.186:55932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:34.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-60-10.0.0.33:22-118.194.249.186:38630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:34.282822 systemd[1]: Started sshd@113-60-10.0.0.33:22-118.194.249.186:38630.service - OpenSSH per-connection server daemon (118.194.249.186:38630). Sep 11 18:10:34.627214 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:35.001820 sshd[13423]: Invalid user user from 118.194.249.186 port 38630 Sep 11 18:10:35.232525 sshd[13423]: Connection closed by invalid user user 118.194.249.186 port 38630 [preauth] Sep 11 18:10:35.231000 audit[13423]: AUDIT1109 pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:35.237282 systemd[1]: sshd@113-60-10.0.0.33:22-118.194.249.186:38630.service: Deactivated successfully. Sep 11 18:10:35.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-60-10.0.0.33:22-118.194.249.186:38630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:35.472900 systemd[1]: Started sshd@114-4151-10.0.0.33:22-118.194.249.186:57024.service - OpenSSH per-connection server daemon (118.194.249.186:57024). Sep 11 18:10:35.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-4151-10.0.0.33:22-118.194.249.186:57024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:36.197523 sshd[13429]: Invalid user user from 118.194.249.186 port 57024 Sep 11 18:10:36.289459 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1420273620.mount: Deactivated successfully. Sep 11 18:10:36.428365 sshd[13429]: Connection closed by invalid user user 118.194.249.186 port 57024 [preauth] Sep 11 18:10:36.428000 audit[13429]: AUDIT1109 pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:36.430713 systemd[1]: sshd@114-4151-10.0.0.33:22-118.194.249.186:57024.service: Deactivated successfully. Sep 11 18:10:36.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-4151-10.0.0.33:22-118.194.249.186:57024 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:36.673926 systemd[1]: Started sshd@115-61-10.0.0.33:22-118.194.249.186:44252.service - OpenSSH per-connection server daemon (118.194.249.186:44252). Sep 11 18:10:36.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-61-10.0.0.33:22-118.194.249.186:44252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:37.026227 dockerd[2991]: time="2026-09-11T18:10:37.026087439Z" level=info msg="image pulled" digest="sha256:e68933b249335b5a57ee334d1d621e5e881d280ed29fdcadfbaa34b963a52a01" remote="ghcr.io/flatcar/nginx:latest" Sep 11 18:10:37.070574 systemd[1]: tmp-containerd\x2dmount1775822407.mount: Deactivated successfully. Sep 11 18:10:37.398429 sshd[13443]: Invalid user user from 118.194.249.186 port 44252 Sep 11 18:10:37.630043 sshd[13443]: Connection closed by invalid user user 118.194.249.186 port 44252 [preauth] Sep 11 18:10:37.629000 audit[13443]: AUDIT1109 pid=13443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:37.631875 systemd[1]: sshd@115-61-10.0.0.33:22-118.194.249.186:44252.service: Deactivated successfully. Sep 11 18:10:37.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-61-10.0.0.33:22-118.194.249.186:44252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:37.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-62-10.0.0.33:22-118.194.249.186:35406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:37.871581 systemd[1]: Started sshd@116-62-10.0.0.33:22-118.194.249.186:35406.service - OpenSSH per-connection server daemon (118.194.249.186:35406). Sep 11 18:10:38.261963 containerd[2527]: time="2026-09-11T18:10:38.260479298Z" level=info msg="connecting to shim ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428" address="unix:///run/containerd/s/224cef6fc31e76dfb77a83c5afefbe741f658eabe6e8f6af2e6cd59ef95a267b" namespace=moby protocol=ttrpc version=3 Sep 11 18:10:38.287192 systemd[1]: Started docker-ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428.scope - libcontainer container ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428. Sep 11 18:10:38.295000 audit: BPF prog-id=626 op=LOAD Sep 11 18:10:38.295000 audit: BPF prog-id=627 op=LOAD Sep 11 18:10:38.295000 audit[13492]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1ac1f356bfd8 a2=98 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.295000 audit: BPF prog-id=627 op=UNLOAD Sep 11 18:10:38.295000 audit[13492]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.295000 audit: BPF prog-id=628 op=LOAD Sep 11 18:10:38.295000 audit[13492]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1ac1f356c290 a2=98 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.296000 audit: BPF prog-id=629 op=LOAD Sep 11 18:10:38.296000 audit[13492]: SYSCALL arch=c000003e syscall=321 success=yes exit=23 a0=5 a1=1ac1f356bfe8 a2=98 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.296000 audit: BPF prog-id=629 op=UNLOAD Sep 11 18:10:38.296000 audit[13492]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.296000 audit: BPF prog-id=628 op=UNLOAD Sep 11 18:10:38.296000 audit[13492]: SYSCALL arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.296000 audit: BPF prog-id=630 op=LOAD Sep 11 18:10:38.296000 audit[13492]: SYSCALL arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1ac1f356c4f0 a2=98 a3=0 items=0 ppid=13481 pid=13492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623531303862663738623430633339326563616131393462 Sep 11 18:10:38.321058 kernel: docker0: port 1(veth4c72c83) entered blocking state Sep 11 18:10:38.321126 kernel: docker0: port 1(veth4c72c83) entered disabled state Sep 11 18:10:38.317000 audit: ANOM_PROMISCUOUS dev=veth4c72c83 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:38.323588 kernel: veth4c72c83: entered allmulticast mode Sep 11 18:10:38.323616 kernel: veth4c72c83: entered promiscuous mode Sep 11 18:10:38.317000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=40 a0=e a1=1ca811f89ce0 a2=28 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.317000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:38.325000 audit[13513]: NETFILTER_CFG table=raw:266 family=2 entries=1 op=nft_register_rule pid=13513 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:38.325000 audit[13513]: SYSCALL arch=c000003e syscall=46 success=yes exit=388 a0=3 a1=7ffe3a598090 a2=0 a3=0 items=0 ppid=2991 pid=13513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.325000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:38.326942 systemd-networkd[2304]: veth4c72c83: Link UP Sep 11 18:10:38.336515 kernel: eth0: renamed from veth1b207c2 Sep 11 18:10:38.336569 kernel: docker0: port 1(veth4c72c83) entered blocking state Sep 11 18:10:38.336585 kernel: docker0: port 1(veth4c72c83) entered forwarding state Sep 11 18:10:38.336725 systemd-networkd[2304]: veth4c72c83: Gained carrier Sep 11 18:10:38.337307 systemd-networkd[2304]: docker0: Gained carrier Sep 11 18:10:38.344125 dockerd[2991]: time="2026-09-11T18:10:38.344095727Z" level=info msg="sbJoin: gwep4 ''->'446ba8508b6a', gwep6 ''->''" eid=446ba8508b6a ep=ownership net=bridge nid=ad3b593e9776 Sep 11 18:10:38.366418 systemd[1]: docker-ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428.scope: Deactivated successfully. Sep 11 18:10:38.382540 dockerd[2991]: time="2026-09-11T18:10:38.382499992Z" level=info msg="ignoring event" container=ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Sep 11 18:10:38.382784 containerd[2527]: time="2026-09-11T18:10:38.382751671Z" level=info msg="shim disconnected" id=ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428 namespace=moby Sep 11 18:10:38.382848 containerd[2527]: time="2026-09-11T18:10:38.382784908Z" level=info msg="cleaning up after shim disconnected" id=ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428 namespace=moby Sep 11 18:10:38.382848 containerd[2527]: time="2026-09-11T18:10:38.382792604Z" level=info msg="cleaning up dead shim" id=ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428 namespace=moby Sep 11 18:10:38.404824 systemd-networkd[2304]: veth4c72c83: Lost carrier Sep 11 18:10:38.405088 kernel: docker0: port 1(veth4c72c83) entered disabled state Sep 11 18:10:38.405115 kernel: veth1b207c2: renamed from eth0 Sep 11 18:10:38.420000 audit[13545]: NETFILTER_CFG table=raw:267 family=2 entries=1 op=nft_unregister_rule pid=13545 subj=system_u:system_r:kernel_t:s0 comm="iptables" Sep 11 18:10:38.420000 audit[13545]: SYSCALL arch=c000003e syscall=46 success=yes exit=380 a0=3 a1=7ffe8245f300 a2=0 a3=0 items=0 ppid=2991 pid=13545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.420000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Sep 11 18:10:38.425985 systemd-networkd[2304]: veth4c72c83: Link DOWN Sep 11 18:10:38.427091 kernel: docker0: port 1(veth4c72c83) entered disabled state Sep 11 18:10:38.427122 kernel: veth4c72c83 (unregistering): left allmulticast mode Sep 11 18:10:38.438495 kernel: veth4c72c83 (unregistering): left promiscuous mode Sep 11 18:10:38.423000 audit: ANOM_PROMISCUOUS dev=veth4c72c83 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Sep 11 18:10:38.439641 kernel: docker0: port 1(veth4c72c83) entered disabled state Sep 11 18:10:38.423000 audit[2991]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=e a1=1ca811d4ff40 a2=20 a3=0 items=0 ppid=1 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.423000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Sep 11 18:10:38.452509 systemd[1]: run-docker-netns-e3061ba56441.mount: Deactivated successfully. Sep 11 18:10:38.456448 systemd[1]: var-lib-docker-rootfs-overlayfs-ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428.mount: Deactivated successfully. Sep 11 18:10:38.474000 audit: BPF prog-id=626 op=UNLOAD Sep 11 18:10:38.474000 audit: BPF prog-id=630 op=UNLOAD Sep 11 18:10:38.532439 sshd[13412]: Connection closed by 20.61.25.254 port 57354 Sep 11 18:10:38.533885 sshd-session[13408]: pam_unix(sshd:session): session closed for user core Sep 11 18:10:38.533000 audit[13408]: AUDIT1106 pid=13408 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:38.533000 audit[13408]: AUDIT1104 pid=13408 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:38.536155 systemd[1]: sshd@112-59-10.0.0.33:22-20.61.25.254:57354.service: Deactivated successfully. Sep 11 18:10:38.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-59-10.0.0.33:22-20.61.25.254:57354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:38.537560 systemd[1]: session-30.scope: Deactivated successfully. Sep 11 18:10:38.538620 systemd-logind[2508]: Session 30 logged out. Waiting for processes to exit. Sep 11 18:10:38.539436 systemd-logind[2508]: Removed session 30. Sep 11 18:10:38.556980 systemd[1]: Started sshd@117-63-10.0.0.33:22-20.61.25.254:60022.service - OpenSSH per-connection server daemon (20.61.25.254:60022). Sep 11 18:10:38.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-63-10.0.0.33:22-20.61.25.254:60022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:38.588297 sshd[13469]: Invalid user user from 118.194.249.186 port 35406 Sep 11 18:10:38.663000 audit[13550]: AUDIT1101 pid=13550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:38.664988 sshd[13550]: Accepted publickey for core from 20.61.25.254 port 60022 ssh2: RSA SHA256:1byi+vvxu1L0dql2ZoB7+9fPhIkMrq11EdoNJjHH5vA Sep 11 18:10:38.664000 audit[13550]: AUDIT1103 pid=13550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:38.664000 audit[13550]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffa9658fb0 a2=3 a3=0 items=0 ppid=1 pid=13550 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Sep 11 18:10:38.664000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Sep 11 18:10:38.665872 sshd-session[13550]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Sep 11 18:10:38.669083 systemd-logind[2508]: New session '31' of user 'core' with class 'user' and type 'tty'. Sep 11 18:10:38.680146 systemd[1]: Started session-31.scope - Session 31 of User core. Sep 11 18:10:38.681000 audit[13550]: AUDIT1105 pid=13550 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:38.682000 audit[13554]: AUDIT1103 pid=13554 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:38.818526 sshd[13469]: Connection closed by invalid user user 118.194.249.186 port 35406 [preauth] Sep 11 18:10:38.817000 audit[13469]: AUDIT1109 pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:38.822360 kernel: kauditd_printk_skb: 68 callbacks suppressed Sep 11 18:10:38.822401 kernel: audit: type=1109 audit(1789150238.817:2329): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:38.823325 systemd[1]: sshd@116-62-10.0.0.33:22-118.194.249.186:35406.service: Deactivated successfully. Sep 11 18:10:38.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-62-10.0.0.33:22-118.194.249.186:35406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:38.828025 kernel: audit: type=1131 audit(1789150238.823:2330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-62-10.0.0.33:22-118.194.249.186:35406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:39.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-4152-10.0.0.33:22-118.194.249.186:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:39.047213 systemd[1]: Started sshd@118-4152-10.0.0.33:22-118.194.249.186:49616.service - OpenSSH per-connection server daemon (118.194.249.186:49616). Sep 11 18:10:39.051020 kernel: audit: type=1130 audit(1789150239.046:2331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-4152-10.0.0.33:22-118.194.249.186:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:39.364191 systemd-networkd[2304]: docker0: Lost carrier Sep 11 18:10:39.451599 systemd[1]: var-lib-docker-rootfs-overlayfs-ab5108bf78b40c392ecaa194be8ed8a0326cdd832c80d84d6598eb4e6da38428.mount: Deactivated successfully. Sep 11 18:10:39.497361 sshd[13554]: Connection closed by 20.61.25.254 port 60022 Sep 11 18:10:39.498712 sshd-session[13550]: pam_unix(sshd:session): session closed for user core Sep 11 18:10:39.498000 audit[13550]: AUDIT1106 pid=13550 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:39.502544 systemd[1]: sshd@117-63-10.0.0.33:22-20.61.25.254:60022.service: Deactivated successfully. Sep 11 18:10:39.504032 kernel: audit: type=1106 audit(1789150239.498:2332): pid=13550 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:39.498000 audit[13550]: AUDIT1104 pid=13550 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:39.506506 systemd[1]: session-31.scope: Deactivated successfully. Sep 11 18:10:39.508017 kernel: audit: type=1104 audit(1789150239.498:2333): pid=13550 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' Sep 11 18:10:39.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-63-10.0.0.33:22-20.61.25.254:60022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:39.511372 systemd-logind[2508]: Session 31 logged out. Waiting for processes to exit. Sep 11 18:10:39.512031 kernel: audit: type=1131 audit(1789150239.501:2334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-63-10.0.0.33:22-20.61.25.254:60022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:39.512042 systemd-logind[2508]: Removed session 31. Sep 11 18:10:39.758164 sshd[13568]: Invalid user user from 118.194.249.186 port 49616 Sep 11 18:10:39.984776 sshd[13568]: Connection closed by invalid user user 118.194.249.186 port 49616 [preauth] Sep 11 18:10:39.984000 audit[13568]: AUDIT1109 pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:39.988927 systemd[1]: sshd@118-4152-10.0.0.33:22-118.194.249.186:49616.service: Deactivated successfully. Sep 11 18:10:39.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-4152-10.0.0.33:22-118.194.249.186:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:39.993570 kernel: audit: type=1109 audit(1789150239.984:2335): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:39.993597 kernel: audit: type=1131 audit(1789150239.988:2336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-4152-10.0.0.33:22-118.194.249.186:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:40.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-4153-10.0.0.33:22-118.194.249.186:37922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:40.233629 systemd[1]: Started sshd@119-4153-10.0.0.33:22-118.194.249.186:37922.service - OpenSSH per-connection server daemon (118.194.249.186:37922). Sep 11 18:10:40.239027 kernel: audit: type=1130 audit(1789150240.232:2337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-4153-10.0.0.33:22-118.194.249.186:37922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:40.963771 sshd[13577]: Invalid user user from 118.194.249.186 port 37922 Sep 11 18:10:41.196683 sshd[13577]: Connection closed by invalid user user 118.194.249.186 port 37922 [preauth] Sep 11 18:10:41.196000 audit[13577]: AUDIT1109 pid=13577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed' Sep 11 18:10:41.197864 systemd[1]: sshd@119-4153-10.0.0.33:22-118.194.249.186:37922.service: Deactivated successfully. Sep 11 18:10:41.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-4153-10.0.0.33:22-118.194.249.186:37922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Sep 11 18:10:41.203027 kernel: audit: type=1109 audit(1789150241.196:2338): pid=13577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=118.194.249.186 addr=118.194.249.186 terminal=ssh res=failed'